How to view Lync log using Snooper?

How to view Lync log using Snooper?

Snooper is my favorite diagnostic tool and honestly without SNOOPER I cannot troubleshoot Lync or MOC issues. This is very valuable tool when you diagnosing Lync Server 2010 problems. It enables you to parse Lync Server debugging logs and client-side log files.

Snooper available: Snooper is part of the Lync Server Resource Kit tools.

http://www.microsoft.com/en-us/download/details.aspx?id=21165

http://www.microsoft.com/en-us/download/details.aspx?id=15344

It is purely GUI mode tool. Snooper can be used to view traces in server and client UCCP log files

The information is displayed in the UI on two tabs, the Traces tab and the Messages tab.

For troubleshooting, it is often necessary to correlate both sections. This can now easily be achieved using two different options that are provided by the new Snooper tool. Selecting the Show Errors/Warnings in messages tab setting from the Options menu will add all error and warning trace entries in the SIP message portion of Snooper. The additional error and warning messages that are between the SIP messages will help you understand what is happening on the server side.

Go to Nearest Log Option:

If you are analyzing the SIP messages and want to check what tracing information gets logged during that time, you can use the Go To Nearest Log menu. This will switch to the Traces pane and display the related sequence numbers.

With the latest version of Snooper, you can filter the trace logs by using the Filter Log icon in the menu bar. By enabling or disabling the check boxes for the available components, you can minimize the levels and flags of the displayed log messages. Be aware that the displayed options are context-sensitive, and will only show options that are available for the current log file. For large files, you can also select what time range you are interested in.

Snooper is now capable of querying the Monitoring Server database (LcsCDR). The Error Analysis report lets you search for SIP errors, MS-Diagnostic codes, and request or content types. Figure 16 shows the output for the search using “Error Status Code” 504 (Server Timeout).

Thank you