BACK TO KB LIST

How to Collect Logs for Veeam Agent for Microsoft Windows

KB ID: 2404
Product: Veeam Agent for Microsoft Windows
Version: All
Published: 2017-11-17
Last Modified: 2022-12-22
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please try again later.

Purpose

This article explains how to collect the logs required for a Veeam Agent for Microsoft Windows support case.

Solution

To expedite support case processing, you may collect logs in the following ways: 

Automated Log Collection Script

For a full list of what the script collect, expand the following section:
Data Collected by Automated Log Collection Script
  • Veeam Agent for Microsoft Windows log files located in C:\ProgramData\Veeam\Endpoint
  • Veeam Installer Service logs from %programdata%\Veeam\Backup
  • VSS hardware provider logs from %programdata%\Veeam\Backup
  • Information provided by the systeminfo command
  • Information provided by the vssadmin command
  • Information provided by the fltmc command
  • Windows Application, System, Security and Veeam Agent events
  • The HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint Backup registry key.
  • Computer UUID
  • Veeam Agent certificate (for Agent Management)
  • Get-ChildItem Cert:\LocalMachine\My\ | where{$_.FriendlyName -eq 'Veeam Agent Certificate'} |Format-List -Property Issuer, Subject, SerialNumber, Thumbprint, NotAfter
  • System information
    • Boot configuration
      •  bcdedit /v
  • Mounted volumes
    •  mountvol /l
  • Drivers
    •  Get-WmiObject Win32_PnPSignedDriver| select devicename,drivername,infname,driverversion
  • Hardware information
    •  wmic csproduct
  • .NET Framework setup
    •  Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full"
  • Applied group policy settings
    •  gpresult /z
  • Environment variables:
    • Get-ItemProperty -Path "HKLM:SYSTEM\CurrentControlSet\Control\Session Manager\Environment"
    • Get-ItemProperty -Path "HKCU:\Environment" 
  • Uptime
    •  Get-CimInstance -ClassName Win32_OperatingSystem | Select LastBootUpTime
  • Installed updates
    •  get-wmiobject -class win32_quickfixengineering
  • Windows Firewall settings
    •  Get-NetFirewallProfile | Format-List
  • TLS Settings
    •  reg export "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL"
  • Installed software
    •  Get-WmiObject Win32_Product | Sort-Object Name | Format-Table IdentifyingNumber, Name, InstallDate -AutoSize
  • Windows services status
    •  gwmi win32_service | select displayname, name, startname,startmode,state
  • Windows events
    •  Microsoft-Windows-SMBClient/Connectivity, Microsoft-Windows-SMBClient/Operational
  • Windows cluster events
  • Network configuration settings:
    • Get-NetAdapterBinding | Where-Object { $_.DisplayName -match "File and Printer Sharing" } | Format-Table -AutoSize
  • Network configuration:
    • ipconfig /all
    • netstat -bona
    • route print
DOWNLOAD LOG COLLECTION SCRIPT
  1. Download the script from the link above.
  2. Extract the script to any folder on the computer where Veeam Agent for Microsoft Windows is installed (for example, C:\temp\).
  3. Open an Elevated Command Prompt or PowerShell window and run the command:
PowerShell.exe -ExecutionPolicy ByPass -File <Path to the script>
  1. Run the script with PowerShell. The script executes simple select queries, and no system changes are made.

    If the script runs successfully, a warning message will appear. 
The screenshots the PowerShell script excuting including a warning about the script being provided as courtesy and goes on to say "Starting data collection."

After the script execution, the message about the successful execution will appear.

The script creates a new folder named VeeamAgentLogs_<DDMMYYYY> and stores the collected information in this folder.

The screenshot shows the script having completed, it lists each type of logs it has collected followed by the word Done. The last line of the PowerShell output states "The data has been collected."
  1. Attach the folder mentioned in the PowerShell output to the support case.

If the script fails to collect the logs, collect the information manually, as outlined below.

For information about attaching files to a support case, please review: https://www.veeam.com/kb4162

Collect Logs Manually

The following steps must be completed on the computer where Veeam Agent for Microsoft Windows is installed.

Part 1: Collect Veeam Agent Logs
  1. Navigate to the following folder:
    C:\Programdata\Veeam\Endpoint
    (The programdata folder is hidden by default. Copy and paste the provided path). 
  2. Archive the content of this folder.
Part 2: Collect VSS Diagnostics
  1. Run the following commands using the administrative command prompt:
    • vssadmin list writers > C:\vss_writers.log
    • vssadmin list providers > C:\vss_providers.log
    • vssadmin list shadows > C:\vss_shadows.log
    • vssadmin list shadowstorage > C:\vss_shadow_storage.log
  2. Archive the resulting files.
     

User-added image
 

Part 3: Collect Event Logs
  1. Run the Event Viewer (eventvwr.msc).
  2. In the left menu, find the Application logs.
  3. Right-click the Application logs and select Save All Events As.
  4. Enter the file name that includes the log type and the computer name the logs were exported from (for example, when exporting Application logs from a computer named HV01, enter Application_HV01).
  5. In Save as type, select Event Files (*.evtx).
  6. Include the display information.

    User-added image

  7. Repeat steps 3—6 for the System logs.
  8. Archive the logs. Include the LocaleMetaData folder in the archive as well.

    User-added image
     

Step 4: Collect File System Minifilter Diagnostics
  1. Run the fltmc instances > C:\filter.log command using the administrative command prompt.
Step 5: Collect Hardware VSS Provider logs

[Only needed for backup jobs which use Storage Snapshots functionality]

  1. Navigate to the following folder:
    C:\Programdata\Veeam\Backup
    (the programdata folder is hidden by default. Copy and paste the provided path). 
  2. Archive the content of this folder.
For information about attaching files to a support case, please review: https://www.veeam.com/kb4162

More Information

For more information on how we process the collected data, please visit: vee.am/processing_of_personal_data
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please try again later.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Start using Veeam:
Download the product
&
Activate the license key
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please try again later.