⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 15002 - HTTP

HTTP - 15002


Description »
Unable to write to the log file ex090718.log for site W3SVC1. Disk may be full. If this is a network path, make sure that network connectivity is not broken.
Data formatted as » WORDS
0000: 00040000 00520003 00000000 c0003a9a
0010: 00000000 00000000 00000000 00000000
0020: 00000000 00000000 c000007f

This event is exactly what it says.
The NTSTATUS value of C000007F appears in the data section, and this means STATUS_DISK_FULL. This won't always be the reason. Other ntstatus values may appear here (eg C0000022, meaning access denied).

Open IIS Manager, look for W3SVC1 in the list of sites, and check to see where the logging is going to. That's where you're going to have to clean up disk space (or in some cases, adjust quotas).

If you're having trouble identifying which site is W3SVC1, you can use iisweb.vbs to list them all:

C:\>cscript c:\windows\system32\iisweb.vbs /query Microsoft (R) Windows Script Host Version 5.7 Copyright (C) Microsoft Corporation. All rights reserved. Connecting to server ...Done. Site Name (Metabase Path) Status IP Port Host ============================================================================== Default Web Site (W3SVC/1) STARTED ALL 80 N/A

Here, we can see that W3SVC1 is in fact more colloquially known as Default Web Site.