CWS Log - Questions

Khurram Shahzad

Hi All,

I am analyzing CWS Log and found following entries which I could not map to any external events at IIS / Pool Level. Can anyone please explain for me below entries in CWS Log file.

1 ) What is trigger point behind these logs enteries, i see these quite frequent in my log files

2019-01-15 12:15:01,3967 INFO [24] Content Web Services 16.2.3 File Version: 16.2.3.13
2019-01-15 12:15:01,3967 INFO [24] OS Version: Microsoft Windows NT 6.3.9600.0
2019-01-15 12:15:01,3967 INFO [24] CLR Version: 2.0.50727.8793
2019-01-15 12:15:01,3967 INFO [24] Machine Name: server
2019-01-15 12:15:01,3967 INFO [24] User Domain: domain
2019-01-15 12:15:01,3967 INFO [24] User Name: user
2019-01-15 12:15:01,3967 INFO [24] Command Line: c:\windows\system32\inetsrv\w3wp.exe -ap "OTCSws" -v "v2.0" -l "webengine4.dll" -a \\.\pipe\iisipm40260fc4-28f2-4186-b584-627aef2321e8 -h "C:\inetpub\temp\apppools\OTCSws\OTCSws.config" -w "" -m 0
2019-01-15 12:15:01,3967 INFO [24] Culture: en-US
2019-01-15 12:15:01,3967 INFO [24] ---------------
2019-01-15 12:15:01,4280 INFO [13] ---------------
2019-01-15 12:15:01,4280 INFO [13] Content Web Services 16.2.3 File Version: 16.2.3.13
2019-01-15 12:15:01,4280 INFO [13] OS Version: Microsoft Windows NT 6.3.9600.0
2019-01-15 12:15:01,4280 INFO [13] CLR Version: 2.0.50727.8793
2019-01-15 12:15:01,4280 INFO [13] Machine Name: server
2019-01-15 12:15:01,4280 INFO [13] User Domain: domian
2019-01-15 12:15:01,4280 INFO [13] User Name: user
2019-01-15 12:15:01,4280 INFO [13] Command Line: c:\windows\system32\inetsrv\w3wp.exe -ap "OTCSws" -v "v2.0" -l "webengine4.dll" -a \\.\pipe\iisipm40260fc4-28f2-4186-b584-627aef2321e8 -h "C:\inetpub\temp\apppools\OTCSws\OTCSws.config" -w "" -m 0
2019-01-15 12:15:01,4280 INFO [13] Culture: en-US
2019-01-15 12:15:01,4280 INFO [13] ---------------

 

2 ) Application Shutdown entries are also being logged without any Pool recycle or shutdown entries in Event Viewer (i have enabled 'generate recycle event log' entry at OTCSws pool)

2019-01-15 09:16:06,7142 INFO [13] Application shutdown
2019-01-15 09:16:06,7142 INFO [13] ---------------
2019-01-15 09:16:36,7204 INFO [13] ---------------
2019-01-15 09:16:36,7204 INFO [13] Application shutdown
2019-01-15 09:16:36,7204 INFO [13] ---------------
2019-01-15 09:17:06,7221 INFO [13] ---------------
2019-01-15 09:17:06,7221 INFO [13] Application shutdown

 

Regards,

Nizar Ghazal

Hi Khurram,

The command lines, and the subsequent shutdowns, read like the start-up and shut-down of worker processes in IIS, for the given app pool.

If I recall, IIS has a set idle time-out time for worker processes, they'll keep running and then eventually shut-down if there are no requests forwarded to the application. You'll likely see a bunch of these in the CWS logs.

I think I remember EventViewer applications having something that would coincide with this event.

Thanks.