How to collect logs for Veeam Agent for Windows
| KB ID: | 2404 |
| Product: | Veeam Agent for Microsoft Windows |
| Version: | All |
| Published: | 2017-11-17 |
| Last Modified: | 2021-09-10 |
Objective
Solution
To expedite support case processing, please attach the following logs to your support case:
- Veeam Agent logs
- VSS diagnostics
- Event logs
- File system minifilter diagnostics
- [For jobs using Storage Snapshots] Hardware VSS Provider Logs
You can collect logs in the following ways:
Automated Log Collection Script
The log collection script grabs the following information:
- Veeam Agent for Microsoft Windows log files located in C:\ProgramData\Veeam\Endpoint
- VSS hardware provider logs from %programdata%\Veeam\Backup
- Information provided by the systeminfo command
- Information provided by the vssadmin command
- Information provided by the fltmc command
- Windows Application, System, Security and Veeam Agent events
- The HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint Backup registry key.
- Computer UUID
- Download the script from the link above.
- Extract the script to any folder on the computer where Veeam Agent for Microsoft Windows is installed (for example, C:\temp\).
- Open an Elevated Command Prompt or PowerShell window and run the command:
PowerShell.exe -ExecutionPolicy ByPass -File <Path to the script>- Run the script with PowerShell. The script executes simple select queries, no system changes are made.
If the script runs successfully, the warning message will appear.
After the script execution, the message about the successful execution will appear.
The script creates a new folder with the name VeeamAgentLogs_<DDMMYYYY> and stores the collected information into this folder.
- Attach the folder mentioned in the PowerShell output to the support case.
If the script fails to collect the logs, collect the information manually as outlined below.
Collect Logs Manually
The following steps must be done on the computer where Veeam Agent for Microsoft Windows is installed.
1. Collect Veeam Agent Logs
- Navigate to the following folder:
C:\Programdata\Veeam\Endpoint
(The programdata folder is hidden by default. Copy and paste the provided path). - Archive the content of this folder.
2. Collect VSS Diagnostics
- Run the following commands using the administrative command prompt:
- vssadmin list writers > C:\vss_writers.log
- vssadmin list providers > C:\vss_providers.log
- vssadmin list shadows > C:\vss_shadows.log
- vssadmin list shadowstorage > C:\vss_shadow_storage.log
- Archive the resulting files.
3. Collect Event Logs
- Run the Event Viewer (eventvwr.msc).
- In the left menu, find the Application logs.
- Right-click the Application logs and select Save All Events As.
- Enter the file name that includes the log type and the computer name the logs were exported from (for example, when exporting Application logs from a computer named HV01, enter Application_HV01).
- In Save as type, select Event Files (*.evtx).
- Include the display information.
- Repeat steps 3—6 for the System logs.
- Archive the logs. Include the LocaleMetaData folder in the archive as well.
4. Collect File System Minifilter Diagnostics
- Run the fltmc instances > C:\filter.log command using the administrative command prompt.
5. Collect Hardware VSS Provider logs
[Only needed for backup jobs which use Storage Snapshots functionality]
- Navigate to the following folder:
C:\Programdata\Veeam\Backup
(the programdata folder is hidden by default. Copy and paste the provided path). - Archive the content of this folder.
More information
Privacy Notice
Please note that the information provided to Veeam for purposes of customer support may be considered protected under certain data protection regulations and/or internal company policies. A list of potentially sensitive data types is available in the following KB article. The Support team may provide a log scrubbing utility upon request. Veeam will only utilize this information for the specific purpose of providing customer support to you and will protect the information in accordance with its privacy policy. In any event, the information provided will be securely deleted after 45 inactive days as of the last upload to the SFTP. If you would like it deleted sooner, please express this request directly to your support contact once the issue has been resolved. For more information on how we process the collected data, please visit: vee.am/processing_of_sensitive_data
| KB ID: | 2404 |
| Product: | Veeam Agent for Microsoft Windows |
| Version: | All |
| Published: | 2017-11-17 |
| Last Modified: | 2021-09-10 |
Couldn't find what you were looking for?
Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!
