How do I retrieve log files from a multi-server farm using the correlation ID and Merge-SPLogfile?

The dreaded Correlation ID! It is fine when you have a few servers on your farm. However, if you manage a huge farm finding the error can be time-consuming. Instead of searching every server in the farm logs to match the correlation ID, the Merge-SPLogfile cmdlet allows an admin to create one logfile from the correlation ID. The cmdlet will search every server in the farm, match the correlation ID, and make one single log file.

Here is an example:

Merge-SPLogfile –Path “C:\SP2013\ErrorLogs\mergedlogs.log” –Correlation <Correlation ID>

When you receive the Correlation ID from a user outside the twenty-minute window, you need to provide a general start time/date and end time/date. In this example, the user tells me that the Correlation ID was received around today from 1 pm to 3 pm.

Here is an example:

Merge-SPLogfile –Path “C:\SP2013\ErrorLogs\mergedlogs.log” –Correlation <Correlation ID>

-StartTime “03/18/2016 13:00” –EndTime “03/18/2016 15:00”

Questions? Contact us!