Issue 1 : Site "Failed" status
Scan the IIS Server in which the site status is Failed in IIS Server pages.
You can get the IIS Log Folder name from Log Directory. eg : W3SVC4

Search in ELA serverout for that Log folder trace followed by "File does not exists" trace.

Check if the File that ELA is searching for is Available in the actual IIS server Log Directory Folder. (If it is not available, then the log file is not generated by IIS itself - Not An Issue )
If the file is there with a different name (eg: u_ex231103_x.log instead of u_ex231103.log) -
If there are no logs recorded from the time of configuring the IIS server until now,
Kindly delete the specific Site
Add Site(s) >> Rediscover Sites >> Add the specific site.
Raise SPOC query. Also, from IIS Configuration Manager >> Specific Site >> Logging , Collect screenshots and share in SPOC thread
Log File Destination
Select Fields > Custom Field

Issue 3 : Could not connect to <shared_path> :
- If you find the exception like the below SS in the serverout folder, kindly collect the below details.
- Type net use \\x.x.x.x\IPC$ * /user:Outpost24 replacing "x.x.x.x" with the IP address of the target system (IIS) and replacing "Outpost24" with the username you need to test authentication with and press Enter. When prompted for, type the password for the specified username and press Enter. If the username and password is valid, the text “The command completed successfully.” is displayed before returning to the prompt.
- In the IIS server, kindly execute the below command and get the complete output screenshot.
powershell -command "Get-SmbClientConfiguration"- In the ELA server, kindly execute the below command and get the complete output screenshot.
powershell -command "Get-SmbServerConfiguration"
Issue 4 : Access Denied :
Exception in logs
(Get Screenshot from cx for all the steps mentioned below )
1. Try with the same credentials using FQDN and IP address of IIS Server.
2. Check if the user have admin privileges(this includes admin share access C$,Admin$..) and have permission to access the IIS log file location.
- To find access to admin shares kindly login to the IIS server using the credentials used in ELA .
- Open command promt and execute net share
You can find the same in EventLog Analyser -> Settings-> Import Logs tab
3. From Eventlog Analyzer server, Try accessing the IIS log location from network path using the same credentials \\<IIS-Server-Name>\<Drive-name> eg : \\mari-9316\c$\inetpub\logs\LogFiles\W3SVC1 - drive name can be find in logs(highlighted)


4. From ELA Server Type net use \\x.x.x.x\IPC$ * /user:Outpost24 replacing "x.x.x.x" with the IP address of the target system (IIS) and replacing "Outpost24" with the username you need to test authentication with and press Enter. When prompted for, type the password for the specified username and press Enter. If the username and password is valid, the text “The command completed successfully.” is displayed before returning to the prompt.
Issue 5: Null pointer exception in serverout
Issue RC:
NTLM authentication might be disabled in the cx environment. Kindly ask to enable the same and try configuring the IIS once
Check if "Deny all accounts" is there for incoming NTLM traffic and outgoing as well. That option needs to be either Not Defined or allow all accounts.
Issue : Config Log Collection Status Failed
Check the Log collection status of that Device in Device Management >> Windows Devices.
If its Access Denied there is issue in Device Credentials (or) Check with Windows Log Collection issue.
If the Device Not in Windows Device. Check in Other devices tab , If there change its Device type to Windows.
Check if there is any Device Duplication, Same device added both in Windows and Other Devices - if So Device Duplication issue