Monitoring Approach for FSLogix

shockoMS 276 Reputation points
2021-08-27T21:33:04.637+00:00

We have started a POC of using FSlogic O365 container and profile container. One thing I am struggling with is the monitoring approach. It seems the product uses a mix of Windows event logging and file logging (with some ETL file also). To develop a monitoring and alerting approach though I would need to know whats logged and to where. Is this documented anywhere? We recently had an issue where some users O365 container VHDX could not be loaded. This was not picked up and so our business were not happy.  I could tail the logs file using Splunk or the like but I need a reference for what's logged to build a parser or a list of Windows EventIDs to monitor for in the Windows Event Log.

FSLogix
FSLogix
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
488 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sky 101 Reputation points
    2021-08-29T16:52:02.163+00:00

    We are having the similar issues.

    We will either configure an event forwarding policy to a central log repository, or create task using task scheduler to trigger some action in case any error message logged on Event log under Applications and Services Logs -> Microsoft -> Fslogix -> Apps -> Operational.

    We are going to enable prevent logon failure registry settings as well.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.