CS6:客户询问启用NLB ETW log 方法

客户咨询概括：

客户发现NLB集群有问题希望起用ETW log 来进行进一步排错，需要提供咨询。

建议内容：

1.确认客户环境为Server 2008R2版本NLB。

1. 保存以下xml名称为: networkloadbalancing-core-diagnostic.events.man
2. 拷贝以上文本到NLB节点.
3. 命令行导入以上xml:
4. wevtutil im networkloadbalancing-core-diagnostic.events.man

<?xml version=’1.0′ encoding=’utf-8′ standalone=’yes’?>
<assembly
xmlns=”urn:schemas-microsoft-com:asm.v3″
xmlns:win=”http://manifests.microsoft.com/win/2004/08/windows/events”
xmlns:xsd=”http://www.w3.org/2001/XMLSchema”
xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance”
manifestVersion=”1.0″

<assemblyIdentity
buildType=”$(build.buildType)”
language=”neutral”
name=”Microsoft-Windows-NetworkLoadBalancing-Core-Diagnostic-Events”
processorArchitecture=”$(build.processorArchitecture)”
publicKeyToken=”$(Build.WindowsPublicKeyToken)”
version=”$(build.version)”
versionScope=”nonSxS”
/>
<instrumentation>
<events xmlns=”http://schemas.microsoft.com/win/2004/08/events”&gt;
<provider
guid=”{DEF02E30-3290-4b2d-BC28-D2B0EDADF411}”
message=”$(string.NLB.Diagnostics.ProviderName)”
messageFileName=”%SystemRoot%System32driversnlb.sys”
name=”Microsoft-Windows-NLB-Diagnostic”
resourceFileName=”%SystemRoot%System32driversnlb.sys”
symbol=”MICROSOFT_NETWORK_LOAD_BALANCING_DIAGNOSTIC_PUBLISHER”

<channels>
<channel
chid=”NlbTrace”
enabled=”false”
isolation=”System”
message=”$(string.NLB.Diagnostics.DiagnosticChannel)”
name=”Microsoft-Windows-NLB/Diagnostic”
symbol=”NLB_TRACE_CHANNEL”
type=”Analytic”

<logging>
<retention>false</retention>
<maxSize>104857600</maxSize>
</logging>
<publishing>
<clockType>QPC</clockType>
</publishing>
</channel>
</channels>
<tasks>
<task
message=”$(string.FilteringTaskMsg.1)”
name=”Task.Filtering.SendAccept”
symbol=”TaskFilteringSendAccept”
value=”101″
/>
<task
message=”$(string.FilteringTaskMsg.2)”
name=”Task.Filtering.SendDrop”
symbol=”TaskFilteringSendDrop”
value=”102″
/>
<task
message=”$(string.FilteringTaskMsg.3)”
name=”Task.Filtering.ReceiveAccept”
symbol=”TaskFilteringReceiveAccept”
value=”103″
/>
<task
message=”$(string.FilteringTaskMsg.4)”
name=”Task.Filtering.ReceiveDrop”
symbol=”TaskFilteringReceiveDrop”
value=”104″
/>
</tasks>
<opcodes/>
<keywords>
<keyword
mask=”0x0000000000000001″
message=”$(string.Keyword.NLB)”
name=”NLB”
/>
<keyword
mask=”0x0000000000000002″
message=”$(string.Keyword.Filtering)”
name=”Filtering”
/>
<keyword
mask=”0x0000000000000004″
message=”$(string.Keyword.Hook)”
name=”Hook”
/>
<keyword
mask=”0x0000000000000008″
message=”$(string.Keyword.Send)”
name=”Send”
/>
<keyword
mask=”0x0000000000000010″
message=”$(string.Keyword.Receive)”
name=”Receive”
/>
<keyword
mask=”0x0000000000000020″
message=”$(string.Keyword.Accept)”
name=”Accept”
/>
<keyword
mask=”0x0000000000000040″
message=”$(string.Keyword.Drop)”
name=”Drop”
/>
</keywords>
<maps>
<valueMap name=”NLB_ACCEPT_DROP_REASON”>
<map
message=”$(string.NLB_ACCEPT_DROP_REASON.0)”
value=”0″
/>
<map
message=”$(string.NLB_ACCEPT_DROP_REASON.1)”
value=”1″
&nb

原文地址：http://blog.51cto.com/13133729/2064928