Azure / Azure/azure-diskinspect-service

Request to add 3 more windows event logs for troubleshooting

Open
#255 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
33
Forks
65
Avg merge
2d 25m
Merged PRs (30d)
2

Description

To investigate slow logon or RDP issue like stuck on error "Please wait for the Group Policy Client", we need the following logs to review:
/Windows/System32/winevt/Logs/Microsoft-Windows-User Profile Service%4Operational.evtx
/Windows/System32/winevt/Logs/Microsoft-Windows-Winlogon%4Operational.evtx
/Windows/System32/winevt/Logs/Microsoft-Windows-GroupPolicy%4Operational.evtx

Could you add the logs above to default "Diagnostic" inspect disk options?
Source code: https://github.com/Azure/azure-diskinspect-service/blob/master/manifests/windows/diagnostic

Reference:
https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/troubleshoot-user-profiles-events
https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/applying-group-policy-troubleshooting-guidance

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with manifests/windows/diagnostic and inspect how the existing Diagnostic inspect disk options list Windows event logs. Add the three requested User Profile Service, Winlogon, and GroupPolicy .evtx paths, then verify that the Diagnostic option includes all three entries.

Written by the indexing model from the issue text.

Assessment

Domain
operating-systems
Issue type
Feature
Difficulty
1/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.