Share via


Interpret RRAS logs

Question

Thursday, May 7, 2020 10:44 AM

Logfiles located in C:\windows\system32\logfile\inxxxx.log on a Windows 2019 RRAS server.

Does anyone know definitively the headers used for this log file and how best to interpret them?

All replies (3)

Friday, May 8, 2020 9:01 AM

Hi,

Based on my research, the heading row of the log file you mentioned should be listed as below:

ComputerName,ServiceName,Record-Date,Record-Time,Packet-Type,User-Name,Fully-Qualified-Distinguished-Name,Called-Station-ID,Calling-Station-ID,Callback-Number,Framed-IP-Address,NAS-Identifier,NAS-IP-Address,NAS-Port,Client-Vendor,Client-IP-Address,Client-Friendly-Name,Event-Timestamp,Port-Limit,NAS-Port-Type,Connect-Info,Framed-Protocol,Service-Type,Authentication-Type,Policy-Name,Reason-Code,Class,Session-Timeout,Idle-Timeout,Termination-Action,EAP-Friendly-Name,Acct-Status-Type,Acct-Delay-Time,Acct-Input-Octets,Acct-Output-Octets,Acct-Session-Id,Acct-Authentic,Acct-Session-Time,Acct-Input-Packets,Acct-Output-Packets,Acct-Terminate-Cause,Acct-Multi-Ssn-ID,Acct-Link-Count,Acct-Interim-Interval,Tunnel-Type,Tunnel-Medium-Type,Tunnel-Client-Endpt,Tunnel-Server-Endpt,Acct-Tunnel-Conn,Tunnel-Pvt-Group-ID,Tunnel-Assignment-ID,Tunnel-Preference,MS-Acct-Auth-Type,MS-Acct-EAP-Type,MS-RAS-Version,MS-RAS-Vendor,MS-CHAP-Error,MS-CHAP-Domain,MS-MPPE-Encryption-Types,MS-MPPE-Encryption-Policy,Proxy-Policy-Name,Provider-Type,Provider-Name,Remote-Server-Address,MS-RAS-Client-Name,MS-RAS-Client-Version

 

If you paste this heading row as the first line of the log file, then import the file into Microsoft Excel, the columns will be properly labeled.
For more information about the log file, you can refer to the following link which introduces heading row of NPS logs:

NPS logs

Hope this can help you.

Best regards,

Phoebe Wu

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]   


Monday, May 11, 2020 1:55 AM

Hi,

Just want to confirm the current situations. Was your issue resolved?

If the information provided is helpful, please mark my previous replies as answered.

Please feel free to let us know if you need further assistance.

Best regards, 

Phoebe Wu

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]   


Wednesday, May 13, 2020 1:50 AM

Hi,

As this thread has been quiet for a while, we proposed it as ‘Answered’. If the information provided is helpful, please mark it as answered.
If you need further help, please feel free to reply this post directly so we will be notified to follow it up.
We’d love to hear your feedback about the solution. Thanks for your understanding and efforts.

Best regards,

Phoebe Wu

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]