Event Logging from ASP.NET

[Andrew Robinson]

In the past, I remember all kinds of security related issues when trying to
write to the event log but don't remember the specifics. Was there an issue
with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

[Peter Bradley]

Ysgrifennodd Andrew Robinson:

In the past, I remember all kinds of security related issues when trying
to write to the event log but don't remember the specifics. Was there an
issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

Yes. My understanding is that you can write to a log that's been
created, but you can't create a new log.

We have a little Windows.Forms app that creates a log with a given name.
ASP.NET and Web service applications can then write to that log.
Whether or not this is the best solution, I have no idea, but it works
for us.

:-)
Peter

[Mark Rae]

"Peter Bradley" <p.*******@dsl.pipex.comwrote in message
news:XM*********************@pipex.net...

Yes. My understanding is that you can write to a log that's been created,
but you can't create a new log.

That's also my understanding...

We have a little Windows.Forms app that creates a log with a given name.
ASP.NET and Web service applications can then write to that log. Whether
or not this is the best solution, I have no idea, but it works for us.

I have something similar...
--
http://www.markrae.net

[George Ter-Saakov]

The "issue" is still there. You can not create new source. But since you do
it only once simply have a desktop program that does it and run it under
Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl...

In the past, I remember all kinds of security related issues when trying
to write to the event log but don't remember the specifics. Was there an
issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

[George Ter-Saakov]

Are you getting paid for messages?

George

"Mark Rae" <ma**@markNOSPAMrae.netwrote in message
news:uL**************@TK2MSFTNGP06.phx.gbl...

"Peter Bradley" <p.*******@dsl.pipex.comwrote in message
news:XM*********************@pipex.net...

>Yes. My understanding is that you can write to a log that's been
created, but you can't create a new log.

That's also my understanding...

>We have a little Windows.Forms app that creates a log with a given name.
ASP.NET and Web service applications can then write to that log. Whether
or not this is the best solution, I have no idea, but it works for us.

I have something similar...
--
http://www.markrae.net

[Andrew Robinson]

Ok, if I can't create a new Source and I really don't want to require a user
to first run some type of desktop app, any suggestions on an existing source
that is likely to exist that I can use?

-Andy
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:OZ**************@TK2MSFTNGP06.phx.gbl...

The "issue" is still there. You can not create new source. But since you
do it only once simply have a desktop program that does it and run it
under Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl...

>In the past, I remember all kinds of security related issues when trying
to write to the event log but don't remember the specifics. Was there an
issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

[Mark Rae]

"George Ter-Saakov" <gt****@cardone.comwrote in message
news:eu**************@TK2MSFTNGP06.phx.gbl...

Are you getting paid for messages?

No more than you are for top-posting...
--
http://www.markrae.net

[George Ter-Saakov]

Not sure what type of solution you looking for.
New "source" is a simple entry in a registry.
You can
a) created manually
b) create using program that runs under Admin rights.
You choose.

Another option would be not to log into event log and intead send an email
with error info.
That is how all my online application work.

So usually i am there fixing bugs before user called me.

George.


"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...

Ok, if I can't create a new Source and I really don't want to require a
user to first run some type of desktop app, any suggestions on an existing
source that is likely to exist that I can use?

-Andy
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:OZ**************@TK2MSFTNGP06.phx.gbl...

>The "issue" is still there. You can not create new source. But since you
do it only once simply have a desktop program that does it and run it
under Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl. ..

>>In the past, I remember all kinds of security related issues when trying
to write to the event log but don't remember the specifics. Was there an
issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

[Juan T. Llibre]

re:
!any suggestions on an existing source that is likely to exist that I can use?

The Application Event Log is a good candidate.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================
"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...

Ok, if I can't create a new Source and I really don't want to require a user to first run some
type of desktop app, any suggestions on an existing source that is likely to exist that I can use?

-Andy
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:OZ**************@TK2MSFTNGP06.phx.gbl...

>The "issue" is still there. You can not create new source. But since you do it only once simply
have a desktop program that does it and run it under Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl. ..

>>In the past, I remember all kinds of security related issues when trying to write to the event
log but don't remember the specifics. Was there an issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services account? Did this change
with .NET v2.0 and/or Win 2003 SP1?
thanks,

[George Ter-Saakov]

I am afraid you a bit misleading the guy. "Application" Event Log is a name
of the log and not a source.
There are 2 components when writing into even log.

Source and Log Name.

Log Name identifies which event log. "Application", "System".... You can
create your own name and it will be shown in the Even Viewer as a root node.

Then there is a Source of the event. Source basically points to which
application has created that entry in event log. You can see Source as a
column in the event viewer.

So folowing code
if (!EventLog.SourceExists("TEST"))

EventLog.CreateEventSource("TEST", "Application");

EventLog.WriteEntry("TEST", msg, EventLogEntryType.Error);

will create even source TEST connected to event log "Application" and then
write there with source "TEST"

You need to have admin rights to create both new Log (usually "Application"
is used so no need to create it).
and new source.

George.


"Juan T. Llibre" <no***********@nowhere.comwrote in message
news:%2****************@TK2MSFTNGP04.phx.gbl...

re:
!any suggestions on an existing source that is likely to exist that I
can use?

The Application Event Log is a good candidate.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================
"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...

>Ok, if I can't create a new Source and I really don't want to require a
user to first run some type of desktop app, any suggestions on an
existing source that is likely to exist that I can use?

-Andy
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:OZ**************@TK2MSFTNGP06.phx.gbl...

>>The "issue" is still there. You can not create new source. But since you
do it only once simply have a desktop program that does it and run it
under Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl.. .
In the past, I remember all kinds of security related issues when
trying to write to the event log but don't remember the specifics. Was
there an issue with creating a new source?

Can you write if you are using the ASP.NET account or Network Services
account? Did this change with .NET v2.0 and/or Win 2003 SP1?
thanks,

[Peter Bradley]

Ysgrifennodd Andrew Robinson:

Ok, if I can't create a new Source and I really don't want to require a
user to first run some type of desktop app, any suggestions on an
existing source that is likely to exist that I can use?

-Andy

Hang on. You're not trying to do logging on the client, are you? I
think everyone else is talking about the server(s). The "desktop" app
would be run on the Web server(s) as part of the ASP.NET application
install. Put it in an .msi file, if you like, that installs the whole
application.

Since the restriction only applies to Web apps, objects on other servers
- app servers and the like - don't have the problem.

Is there a problem with any of that?
Peter

[George Ter-Saakov]

Good catch Peter.
We could have beaten that cow to death and he's still going to have problem
:)
George

>
Hang on. You're not trying to do logging on the client, are you? I think
everyone else is talking about the server(s). The "desktop" app would be
run on the Web server(s) as part of the ASP.NET application install. Put
it in an .msi file, if you like, that installs the whole application.

Since the restriction only applies to Web apps, objects on other servers -
app servers and the like - don't have the problem.

Is there a problem with any of that?
Peter

[Andrew Robinson]

Guys,

I have done all kinds of logging in the past and am currently doing
extensive SMTP based logging within the Application_Error event but it looks
very much so like some of my SMTP messages are not making their way back to
my email account. Only a handful are missing and I cannot reproduce any
configuration that causes these to fail. Guessing that they are being
filtered by my clients ISP at certain times of the day?

I was thinking about logging additional info to the even log but don't have
full access to the server and really don't want to go down the path of
adding sources to the registry.

Thanks,

"Peter Bradley" <p.*******@dsl.pipex.comwrote in message
news:5L******************************@pipex.net...

Ysgrifennodd Andrew Robinson:

>Ok, if I can't create a new Source and I really don't want to require a
user to first run some type of desktop app, any suggestions on an
existing source that is likely to exist that I can use?

-Andy

Hang on. You're not trying to do logging on the client, are you? I think
everyone else is talking about the server(s). The "desktop" app would be
run on the Web server(s) as part of the ASP.NET application install. Put
it in an .msi file, if you like, that installs the whole application.

Since the restriction only applies to Web apps, objects on other servers -
app servers and the like - don't have the problem.

Is there a problem with any of that?
Peter

[Juan T. Llibre]

re:
!"Application" Event Log is a name of the log and not a source.

Right you are...

My apologies.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:O5**************@TK2MSFTNGP04.phx.gbl...

>I am afraid you a bit misleading the guy. "Application" Event Log is a name of the log and not a
source.
There are 2 components when writing into even log.

Source and Log Name.

Log Name identifies which event log. "Application", "System".... You can create your own name and
it will be shown in the Even Viewer as a root node.

Then there is a Source of the event. Source basically points to which application has created that
entry in event log. You can see Source as a column in the event viewer.

So folowing code
if (!EventLog.SourceExists("TEST"))

EventLog.CreateEventSource("TEST", "Application");

EventLog.WriteEntry("TEST", msg, EventLogEntryType.Error);

will create even source TEST connected to event log "Application" and then write there with source
"TEST"

You need to have admin rights to create both new Log (usually "Application" is used so no need to
create it).
and new source.

George.


"Juan T. Llibre" <no***********@nowhere.comwrote in message
news:%2****************@TK2MSFTNGP04.phx.gbl...

>re:
!any suggestions on an existing source that is likely to exist that I can use?

The Application Event Log is a good candidate.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================
"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2****************@TK2MSFTNGP02.phx.gbl...

>>Ok, if I can't create a new Source and I really don't want to require a user to first run some
type of desktop app, any suggestions on an existing source that is likely to exist that I can
use?

-Andy
"George Ter-Saakov" <gt****@cardone.comwrote in message
news:OZ**************@TK2MSFTNGP06.phx.gbl...
The "issue" is still there. You can not create new source. But since you do it only once simply
have a desktop program that does it and run it under Admin account.

Then your ASP.NET will be able to write into event log.

George

"Andrew Robinson" <ne****@nospam.nospamwrote in message
news:%2******************@TK2MSFTNGP03.phx.gbl. ..
In the past, I remember all kinds of security related issues when trying to write to the event
log but don't remember the specifics. Was there an issue with creating a new source?
>
Can you write if you are using the ASP.NET account or Network Services account? Did this
change with .NET v2.0 and/or Win 2003 SP1?
>
>
thanks,

[Steven Cheng[MSFT]]

Hi Andrew,

The original problem is due to ASP.NET default process identity(default
permission) can not create a custom/new event source. But the default
identity should be able to write into the "Application" Event source
without any problem. Here is the original KB article:

#PRB: "Requested Registry Access Is Not Allowed" Error Message When ASP.NET
Application Tries to Write New EventSource in the EventLog
http://support.microsoft.com/kb/329291

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
This posting is provided "AS IS" with no warranties, and confers no rights.

[Steven Cheng[MSFT]]

Hi Andrew,

Does the kb article and the information in previous message what you want?
If there is anything else need help, please feel free to post here.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
This posting is provided "AS IS" with no warranties, and confers no rights.