Federation Service Proxy Logging

Applies To: Windows Server 2008

You can use Active Directory Federation Services (AD FS) log files to troubleshoot issues with the federation server proxy. The creation and updating of AD FS log files are monitored here.

Events

Event ID Source Message

667

Microsoft-Windows-ADFS

The AD FS troubleshooting log is using more than the maximum allowed number of files, but it is not able to delete the oldest files.
Directory: %2
Files used: %3
Maximum files: %4

Log files will continue to be written, but they will exceed the maximum number of files. This event will recur every %1 minutes until the condition is corrected.
Retry period: %1

User Action
Check the permissions on the log file directory. If the directory permissions are correct, determine whether the failing file is opened by another program or whether file-specific permissions are preventing its deletion.

Additional Data
This error occurred as a result of a failed deletion operation on a specific file.
File to be deleted: %5
File deletion error: %6

668

Microsoft-Windows-ADFS

The AD FS troubleshooting log detected that the current file has reached the maximum size, but a new file cannot be created to continue the log.
Directory: %2
File name: %3
File size: %5
Maximum file size: %4

Troubleshooting information will continue to be written to the current log file, which will exceed the maximum log file size. This event will recur every %1 minutes until the condition is corrected.
Retry period: %1

User Action
Check the permissions on the log file directory.

Additional Data
This error occurred as a result of a failed attempt to create a new file.
File to be created: %6
File creation error: %7

669

Microsoft-Windows-ADFS

The AD FS troubleshooting log is not able to create a log file.
Directory: %2
File to be created: %3
File creation error: %4

Troubleshooting information will be lost until this condition is corrected. This event will recur every %1 minutes until the condition is corrected.
Retry period: %1

User Action
Check the permissions on the log file directory.

670

Microsoft-Windows-ADFS

The AD FS troubleshooting log detected that the maximum file size cannot be enforced given the current traffic level and troubleshooting verbosity.
Directory: %2
MaxFileSize: %3

The file names that are assigned to the log files have a resolution of one second. The number of bytes that is being written to the file in a second is greater than the value of MaxFileSize. This condition can have performance implications. This event will recur every %1 minutes until the condition is corrected.
Retry period: %1

User Action
Decrease troubleshooting verbosity or increase the value of MaxFileSize.

686

Microsoft-Windows-ADFS

The AD FS troubleshooting log was not able to start.

An exception has been thrown, and the application pool that hosts the BoundedSizeLogFileTraceListener will not be able to start.

Additional Data
Exception message: %1

Federation Service Proxy

Active Directory Federation Services