- Veeam Support Knowledge Base
- How to Collect Logs for Veeam Agent for Microsoft Windows
How to Collect Logs for Veeam Agent for Microsoft Windows
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
Purpose
This article explains how to collect the logs required for a Veeam Agent for Microsoft Windows support case.
Solution
As this is a PowerShell script, please ensure your environment allows PowerShell script execution.
- Download the script from the link above.
- Extract the script to any folder on the computer where Veeam Agent for Microsoft Windows is installed (for example, C:\temp\).
- Open an Elevated Command Prompt or PowerShell window and run the command:
PowerShell.exe -ExecutionPolicy ByPass -File <Path to the script>
- The script collects data automatically. No system changes are made.
- Once the script is complete a message about the successful execution will appear.
- The script creates a new folder named VeeamAgentLogs_<DDMMYYYY> and stores the collected information in this folder where the script was executed.
- Attach the folder mentioned in the PowerShell output to the support case.
If the script fails to collect the logs, collect the information manually, as outlined below.
More Information
How to Collect Logs Manually
The following steps must be completed on the computer where Veeam Agent for Microsoft Windows is installed.
Part 1: Collect Veeam Agent Logs
- Navigate to the following folder:
C:\Programdata\Veeam\Endpoint
(The programdata folder is hidden by default. Copy and paste the provided path). - Archive the content of this folder.
Part 2: Collect VSS Diagnostics
- Run the following commands using the administrative command prompt:
- vssadmin list writers > C:\vss_writers.log
- vssadmin list providers > C:\vss_providers.log
- vssadmin list shadows > C:\vss_shadows.log
- vssadmin list shadowstorage > C:\vss_shadow_storage.log
- Archive the resulting files.
Part 3: Collect Event Logs
- Run the Event Viewer (eventvwr.msc).
- In the left menu, find the Application logs.
- Right-click the Application logs and select Save All Events As.
- Enter the file name that includes the log type and the computer name the logs were exported from (for example, when exporting Application logs from a computer named HV01, enter Application_HV01).
- In Save as type, select Event Files (*.evtx).
- Include the display information.
- Repeat steps 3—6 for the System logs.
- Archive the logs. Include the LocaleMetaData folder in the archive as well.
Step 4: Collect File System Minifilter Diagnostics
- Run the fltmc instances > C:\filter.log command using the administrative command prompt.
Step 5: Collect Hardware VSS Provider logs
[Only needed for backup jobs which use Storage Snapshots functionality]
- Navigate to the following folder:
C:\Programdata\Veeam\Backup
(the programdata folder is hidden by default. Copy and paste the provided path). - Archive the content of this folder.
For information about attaching files to a support case, please review: https://www.veeam.com/kb4162
Data Collected by Automated Log Collection Script
- Veeam Agent for Microsoft Windows log files located in C:\ProgramData\Veeam\Endpoint
- Veeam Installer Service logs from %programdata%\Veeam\Backup
- VSS hardware provider logs from %programdata%\Veeam\Backup
- Information provided by the systeminfo command
- Information provided by the vssadmin command
- Information provided by the fltmc command
- Windows Application, System, Security and Veeam Agent events
- The HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint Backup registry key.
- Computer UUID
- Veeam Agent certificate (for Agent Management)
- Get-ChildItem Cert:\LocalMachine\My\ | where{$_.FriendlyName -eq 'Veeam Agent Certificate'} |Format-List -Property Issuer, Subject, SerialNumber, Thumbprint, NotAfter
- System information
- Boot configuration
- bcdedit /v
- Boot configuration
- Mounted volumes
- mountvol /l
- Drivers
- Get-WmiObject Win32_PnPSignedDriver| select devicename,drivername,infname,driverversion
- Hardware information
- wmic csproduct
- .NET Framework setup
- Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full"
- Applied group policy settings
- gpresult /z
- Environment variables:
- Get-ItemProperty -Path "HKLM:SYSTEM\CurrentControlSet\Control\Session Manager\Environment"
- Get-ItemProperty -Path "HKCU:\Environment"
- Uptime
- Get-CimInstance -ClassName Win32_OperatingSystem | Select LastBootUpTime
- Installed updates
- get-wmiobject -class win32_quickfixengineering
- Windows Firewall settings
- Get-NetFirewallProfile | Format-List
- TLS Settings
- reg export "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL"
- Installed software
- Get-WmiObject Win32_Product | Sort-Object Name | Format-Table IdentifyingNumber, Name, InstallDate -AutoSize
- Windows services status
- gwmi win32_service | select displayname, name, startname,startmode,state
- Windows events
- Microsoft-Windows-SMBClient/Connectivity, Microsoft-Windows-SMBClient/Operational
- Windows cluster events
- Network configuration settings:
- Get-NetAdapterBinding | Where-Object { $_.DisplayName -match "File and Printer Sharing" } | Format-Table -AutoSize
- Network configuration:
- ipconfig /all
- netstat -bona
- route print
For more information on how we process the collected data, please visit: vee.am/processing_of_personal_data
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please try again later.
You have selected too large block!
Please try select less.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Verify your email to continue your product download
We've sent a verification code to:
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Start using Veeam:
Download the product
&
Activate the license key
Thank you!
Your feedback has been received and will be reviewed.