Abaixo podem encontrar um sumário com os logs do Configuration Manager 2012 (alguns novos e outros já conhecidos).
A documentação deixada aqui apesar de já bastante completa ainda é uma pre-release:
Não hesitem em classificar este artigo e deixar o vosso comentário!
Espero ter ajudado! :)
The following table lists the log files found on the ConfigurationManager client.
Content Access service. Maintains the local package cache on the client.
Records actions for starting applications on the client marked as "run as 32bit".
Records Configuration Manager agent health evaluation activities and details for components that are required by the Configuration Manager agent.
Records the Configuration Manager agent health evaluation activities triggered by the evaluation scheduled task.
Records activities of the client and the SMS Agent Host service.
Records activities related to the maintenance and capture of data related to client performance counters.
Records client agent service restart activity.
Records activities for client agent SDK interfaces.
Maintains certificates for Active Directory Domain Services and management points.
Records details about configuration item definition downloads.
Records tasks that are initiated for each application and deployment type - such as content download or install or uninstall actions.
Records the signing and authentication activity for the client agent.
Creates and maintains the client GUID and identifies tasks performed during client registration and assignment.
Records tasks related to the clients site assignment.
Records the results of running the Configuration Manager HTTPS Readiness Assessment Tool. This tool checks whether computers have a PKI client authentication certificate that can be used for Configuration Manager.
Records information for the remote control service.
Schedules the Background Intelligent Transfer Service (BITS) or the Server Message Block (SMB) to download or to access SMS packages.
Records all BITS communication for policy or package access.
Records information about the installation of the Endpoint Protection client and the application of antimalware policy to that client.
Records details about legacy packages and task sequences that run on the client.
Records details about enhanced detection methods that are used when verbose or debug logging is enabled.
Records all SMB package access tasks.
Records the activity of the Windows Management Instrumentation (WMI) provider for software inventory and file collection.
Records the activity for state messages sent to the fallback status point by the client agent.
Records the network proxy configuration and usage activity for the client agent.
Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the client.
Records the activity for location cache usage and maintenance for the client agent.
Records the client activity for locating management points, software update points, and distribution points.
Records the activity for general maintenance task activity for the client agent.
The WMI provider for .MIF files.
Monitors all software metering processes.
Records requests for policies made by using the Data Transfer service.
Records policy changes.
Records details about the evaluation of policies on client computers, including policies from software updates.
Records the process of remediation and compliance for all providers located in %Program Files%\Microsoft Policy Platform, except the file provider.
Records activities for policy system SDK interfaces.
Shows the activities of the power management provider (PWRInvProvider) hosted in the Windows Management Instrumentation (WMI) service. On all supported versions of Windows, the provider enumerates the current settings on computers during hardware inventory and applies power plan settings.
The primary log for remote control.
Records the activity in Software Center for the indicated user on the client computer.
Records the historical activity in Software Center for the indicated user on the client computer.
Records schedule tasks for all client operations.
Records the activity for notifying users about software and updates for the indicated user.
Records the historical information for notifying users about software and updates for the indicated user.
Records configuration and inventory policy creation in WMI.
Records usage of the Configuration Manager applet in Control Panel.
Records activity for installed Windows Installer applications that are updated with current distribution point source locations.
Records status messages that are created by the client components.
Generates a usage data report that is collected by the metering agent. (This data is logged in Mtrmgr.log.)
Records details about user device affinity.
Records information specific to the evaluation of App-V deployment types.
Client Installation Log Files
The following table lists the log files that contain informationrelated to the installation of the Configuration Manager client.
Records ccmsetup tasks for client setup, client health and remediation, client upgrade, and client removal. Can be used to troubleshoot client installation problems.
Records the repair activities of the client agent.
Records setup tasks performed by client.msi. Can be used to troubleshoot client installation or removal problems.
Site Server and Site System Server Logs
The following table lists the log files found on the ConfigurationManager site server and site system servers.
Computer with log file
Records enrollment processing activity.
Records Active Directory Forest Discovery actions.
Records account creation and security group details in Active Directory.
Records Active Directory Security Group Discovery actions.
Records Active Directory System Discovery actions.
Records Active Directory User Discovery actions.
Records client push installation activities.
Records the certificate activities for intra-site communications.
Site system server
Records activities of the client health manager.
Records changes to the client settings by the Client Install Data Manager (CIDM).
Records details about when collections are created, changed, and deleted by the Collection Evaluator.
Records the status of component threads monitored for the site server.
Records Component Status Summarizer tasks.
Records the initial installation of COM registration results for a site server.
Records pre-requisite component evaluation and installation activities.
Records information about the processing of Management Information Format (MIF) files and hardware inventory in the Configuration Manager database.
Records activities of the discovery data manager.
Records incoming site-to-site communication transfers.
Records details about package creation, compression, delta replication, and information updates.
Records information about the synchronization of malware threat information from the Endpoint Protection site system role server into the Configuration Manager database.
Records the status of the Endpoint Protection site system role.
Provides information about the installation of the Endpoint Protection site system role.
Records activities of the Enrollment service process.
Records activities of the enrollment website process.
Records activities of the fallback status point site system role.
Records information about site configuration changes, and the publishing of site information in Active Directory Domain Services.
Records the files that are moved from the management point to the corresponding INBOXES folder on the site server.
Records file transfer activities between inbox folders.
Records the processing of inbox files and performance counter updates.
Records the forwarding of MIF files from a secondary site to its parent site.
Records information for Migration actions involving migration jobs, shared distribution points, and distribution point upgrades.
The top-level site in the System Center 2012 Configuration Manager hierarchy, and each child primary site
In a multi-primary site hierarchy, use the log file created at the central administration site.
Records the registration of the management point with WINS. Records the availability of the management point every 10 minutes.
Records the actions of the management point component that moves client files to the corresponding INBOXES folder on the site server.
Records details of about the management point installation.
Records the management point installation wrapper process.
Records Network Discovery actions.
Records the discovery activity of site system servers.
Records the processing of object change notifications for replication.
Records advertisement updates.
Records the summarization of deployment status messages.
Records the activities of applying updates to operating system image files.
Records the processing of outbox files and performance counter updates.
Records the results of the installation of performance counters.
Records the actions of the SMS Executive component that is responsible for sending content from a primary site to a remote distribution point.
Records updates to the client policies to reflect changes to client settings or advertisements.
Primary Site Server
Records the activities of database replication between sites in the hierarchy.
Records the replication of files between the site server components and the Scheduler component.
Records errors, warnings, and information about running the Resource Explorer.
The computer that runs the Configuration Manager console
Records details about Auto Deployment Rules around the identification, content download, and update group and deployment creation.
Records details about site-to-site job and package replication.
Records the activities for standard sender content scheduling jobs.
Computer with the SMS Provider
Records the files that transfer by file-based replication between sites.
Records information about the processing of software inventory data to the site database.
Records details about the maintenance of the installed site components on all site system servers in the site.
Records site setting changes made to site control objects in the database.
Records the availability and disk space monitoring process of all site systems.
Records Configuration Manager console activity.
Records the installation activities of the application catalog web service.
Records output from the site backup process.
Records database changes.
Records the installation activities of the enrollment web service.
Records the installation activities of the enrollment website.
Records the processing of all site server component threads.
Site server or site system server
Records messages generated by the installation of a fallback status point.
Records the installation activities of the application catalog web site.
Records WMI provider access to the site database.
Records information about the installation, use, and removal of a Windows service that is used to test network connectivity and permissions between servers, using the computer account of the server initiating the connection.
Site server and site systems
Records detailed results of the reporting point installation process from the MSI output.
Records results of the reporting point installation process.
Records the maintenance of accounts when the site uses standard security.
Records the processing of state system messages.
Records the writing of all status messages to the database.
Records the processing of metering files and settings.
Site Server Installation Log Files
The following table lists the log files that contain informationrelated to site installation.
Records detailed output from site server setup.
Records information related to activity in the Setup wizard UI.
Records information about the progress of launching the secondary site installation process. Details of the actual setup process are contained in ConfigMgrSetup.log.
Fallback Status Point Logs Files
The following table lists the log files that contain informationrelated to the fallback status point.
Management Point Logs Files
The following table lists the log files that contain informationrelated to the management point.
Records client messaging activity on the endpoint.
Records the client registration activity processed by the management point.
Records the conversion of XML.ddr records from clients, and copies them to the site server.
Records the activities of the core management point and client framework components.
Records client authorization activity.
Records policy request activity from client computers.
Records details about the conversion of XML hardware inventory records from clients and the copy of those files to the site server.
Records location request and reply activity from clients.
Records the management point activities related to receiving OTP from a client.
Records policy communication.
Records the transfer of files that are collected from the client.
Records the hardware inventory retry processes.
Records details about the conversion of XML software inventory records from clients and the copy of those files to the site server.
Records details about file collection.
Records details about the conversion of XML.svf status message files from clients and the copy of those files to the site server.
Software Update Point Log Files
he following table lists the log files that contain informationrelated to the software update point.
Records details about the replication of software updates notification files from a parent to child sites.
Records details about the process of downloading software updates from the update source to the download destination on the site server.
The computer hosting the Configuration Manager console from which downloads are initiated
Records details about the software update point installation. When the software update point installation completes, Installation was successful is written to this log file.
Records details about the software update point configuration and connections to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages.
Site server that connects to the Windows Server Update Services (WSUS) server
Records details about the configuration, database connectivity, and health of the WSUS server for the site.
Records details about the software updates synchronization process.
Records details about the Inventory Tool for the Microsoft Updates synchronization process.
The client computer configured as the synchronization host for the Inventory Tool for Microsoft Updates.
The following table lists the log files that contain informationrelated to Application Management.
Records details about the current state, applicability (weather requirements were met or not) as well as desired state of applications, deployment types and their dependencies.
Records details about attempted installs and uninstalls of application deployment types. In addition, it will contain details on detection method evaluation.
Records the monitoring activities for the application catalog web service point site system role.
Records detailed installation information for the application catalog web service point site system role.
Records the activities of the application management SDK.
Records the activity of the application catalog component, including its use of Silverlight.
Records the monitoring activities for the application catalog website point site system role.
Records the MSI installation activity for the application catalog website role.
Records the details about the use of the ExtractContent.exe tool on a remote prestaged distribution point. This tool extracts content that has been exported to a file.
Records the activity of the application catalog web service.
Records the activity of the application catalog website.
Records details about the distribution point health monitoring scheduled task that are configured on a distribution point.
Records the activities for managing the URL for the application catalog shown in Software Center.
Records the activities for Software Center prerequisite component validation.
The following table lists the log files that contain information related todeploying packages and programs.
Records details about legacy packages and task sequences that run.
The following table lists the log files that contain informationrelated to Asset Intelligence.
Computer with Log File
Records the activities of Asset Intelligence inventory actions.
Records details about the processing of XML files from the inbox for updating the catalog.
Records the interaction of the Asset Intelligence synchronization point with SCO (System Center Online), the online web service.
Records details about the installation of Asset Intelligence synchronization point site system role.
Records details about the processing of imported licensing files.
Backup and Recovery
The following table lists log files that contain informationrelated to backup and recovery actions including site resets, and changes tothe SMS Provider.
Records information about setup and recovery tasks when recovering a site from backup.
Records details about the site backup activity.
Records output from the site database backup process when SQL Server is installed on a different server than the site server.
Site database server
Records information about the state of the Configuration Manager VSS writer that is used by the backup process.
The following table lists the log files that contain informationrelated to compliance settings.
Records details about the process of remediation and compliance for settings management, software updates and application management.
Records information about configuration item task scheduling.
Records high-level information about the evaluation , conflict reporting and remediation of desired settings and applications.
Records information about reporting policy platform results into state messages for configuration items.
Records information about reading configuration item synclets from Windows Management Instrumentation (WMI).
Configuration Manager Console
The following table lists the log files that contain informationrelated to the Configuration Manager console.
Computer that runs the Configuration Manager console
Records activities performed by the SMS Provider. Administrator Console activities use the SMS provider.
The following table lists the log files that contain informationrelated to content management.
Site system role
Records details about the extraction of compressed files received from a primary site. This log is generated by the WMI Provider of the remote distribution point.
A distribution point server that is not co-located with the site server.
he following table lists the log files that contain informationrelated to Discovery.
The following table lists the log files that contain informationrelated to Endpoint Protection.
Records details about the installation of the Endpoint Protection client and the application of antimalware policy to that client.
Records details about the synchronization of malware threat information from the Endpoint Protection role server into the Configuration Manager database.
Monitors the status of the Endpoint Protection site system role
The following table lists the log files that contain informationrelated to processing inventory data.
Records the forwarding of MIF files from secondary site to its parent site.
Secondary site server
The following table lists the log files that contain informationrelated to metering.
The following table lists the log files that contain informationrelated to migration.
The following table lists logs that contain information related tomobile device enrollment.
Records communication between management points enabled for mobile device management and the management point endpoints.
Records the windows installer data for setup of a management point enabled for mobile device management.
Records the mobile device management setup process.
Records the Windows Installer data for setup of an enrollment point enabled for mobile device management.
Records communication between devices and the enrollment proxy point enabled for mobile device management.
Records the windows installer data for setup of a enrollment proxy point enabled for mobile device management.
Records communication between enrollment proxy point and enrollment point enabled for mobile device management.
Records communication between devices and the management point that is enabled for mobile device management.
Exchange Server Connector
The following table lists logs that contain information related tothe Exchange Server connector.
Records the activities and the status of the Exchange Server connector.
Mobile Device Legacy
The following table lists logs that contain information related tothe Mobile Device legacy client.
Records details about certificate enrollment data on Windows CE device clients.
Records the HTML response from the certificate server when the Windows CE device Enroller program requests a client authentication certificate.
Records the GUIDs of all the Windows CE clients that are communicating with the management point enabled for mobile device management.
Records registration requests and responses to and from Windows CE devices.
Records client setup data on Windows CE devices.
Records client transfer data for Windows CE Device and ActiveSync deployments.
Records client transfer file installation for setting up Windows CE device client transfer files on client computers.
Records whether DMInstaller correctly calls DmClientSetup, and whether DmClientSetup exits with success or failure on Windows CE devices.
Records all the site database connections and queries made by the management point enabled for mobile device management.
Records all the discovery data from the Windows CE device clients on the management point enabled for mobile device management.
Records hardware inventory data from Windows CE devices on the management point enabled for mobile device management.
Records Windows CE devices communication with management point enabled for mobile device management.
Records the Windows Installer data for setup of a management point enabled for mobile device management.
Records mobile device software distribution data from mobile device clients on a management point enabled for mobile device management.
Records mobile device status messages data from mobile device clients on a management point enabled for mobile device management.
Records Windows CE device client communication with Device Management server role.
Records details about communications to the fallback status point from mobile device clients and client computers on the fallback status Point.
Operating System Deployment
The following table lists the log files that contain informationrelated to operating system deployment.
Records activities for client agent installation and client health evaluations.
Records details for task sequence media creation.
Records driver installation actions or update apply actions for Offline Servicing.
Records details about PXE configuration.
Records details about device drivers that have been imported into the driver catalog.
Records information for multicast package transfer and client request responses.
Records health check, namespace, session creation and certificate check actions.
Records changes to configuration, security mode and availability.
Records multicast provider interaction with Windows Deployment Services (WDS).
Records details about multicast server role installation.
Records details about multicast performance counter updates.
Records management point responses to the client ID requests task sequences initiated from PXE or boot media.
Records management point responses to Auto Apply Driver task sequence action requests.
Records details of Offline Servicing schedules and update apply actions on operating system .wim files.
Records details about Windows Sysprep and setup logs.
Records details about the client state capture and restore actions as well as threshold information.
Records details about the results of state migration point health checks and configuration changes.
Records details about the state migration point and is generated when the state migration point site system has been created.
Records the state migration point performance counter updates.
Records details about the responses to PXE boot clients and details about expansion of boot images and boot files.
Records actives the task sequence.
Records resolution of task sequence dependencies before launching task sequence.
Records details about task sequences when they are imported, exported, or edited.
USMT Log loadstate.log
Records details about the User State Migration Tool (USMT) regarding the restore of user state data.
USMT Log scanstate.log
Records details about the USMT regarding the capture of user state data.
Site System Roles for Out of Band Management
The following table lists the log files that contain informationrelated to the Out of Band Management Service Point.
Records the activities of the out of band service point relating to discovery of management controllers, provisioning, audit log control, and power control commands.
Out of band service point site system server
Records details about managing Active Directory accounts used by out of band management .
Records details about account creation and security group details in Active Directory.
Records details about the activities of the site server relating to provisioning, the activities of sending instruction files to the out of band service point, which include the following: Discovery of management controllers. Provisioning. Audit log control, Power control commands. Shows the activities related to out of band management site replication. Records details about the creation of Enrollment records.
Records details about the installation of the out of band service point.
Out of Band Management Client Computer Log Files
The following table lists the log files that contain informationabout the management of Out of Band Clients.
Records details about out of band management activities performed on workstation computers, including the provisioning state of the management controller.
Out of Band Management Console Log Files
The following table lists the log files that contain informationrelated to the Out of Band console.
Oobconsole_<Machine Name>_<User Name>.log
Records details about running the out of band management console.
Computer that runs the out of band management console
Power Management Log Files
The following table lists the log files that contain informationrelated to power management.
Records details about power management activities performed on the client computer that include monitoring and enforcement activities performed by the Power Management Client Agent.
The following table lists the log files that contain informationrelated to remote control.
The log for remote control.
The following table lists the Configuration Manager log files thatcontain information related to using reporting.
Records information about the activity and status of the reporting point.
The following table lists the log files that contain informationrelated to managing role-based administration.
Software Updates and Network Access Protection
The following table lists the log files that contain informationrelated to software updates and Network Access Protection.
Records details about the processing of compliance evaluation based on Configuration Manager NAP policy processing, and contains the processing of remediation for each software update required for compliance.
Records details about the coordination of system restarts on client computers after software update installations.
Records details about scan requests for software updates, the WSUS location, and related actions.
Records details about tracking of remediation and compliance. However, the software updates log file, Updateshandler.log, provides more informative details about installing the software updates required for compliance.
This log file is shared with compliance settings.
Records details about the evaluation of maintenance windows.
The main log file for the Configuration Manager Network Access Protection client and it contains a merged statement of health information from the two Configuration Manager components: location services (LS) and the configuration compliance agent (CCA). This log file also contains information about the interactions between the Configuration Manager System Health Agent and the operating system NAP agent, and also between the Configuration Manager System Health Agent and both the configuration compliance agent and the location services. It provides information about whether the NAP agent successfully initialized, the statement of health data, and the statement of health response.
This is the main log file for the System Health Validator point and records the basic operations of the System Health Validator service, such as the initialization progress.
Records details about the retrieval of Configuration Manager health state references from Active Directory Domain Services.
Records details about the cache store used to hold the Configuration Manager NAP health state references retrieved from Active Directory Domain Services, such as reading from the store and purging entries from the local cache store file. The cache store is not configurable.
Records client statement of health information and processing operations. To obtain full information, change the registry key LogLevel from 1 to 0 in the following location: HKLM\SOFTWARE\Microsoft\SMSSHV\Logging\@GLOBAL
Records any dynamic change to the System Health Validator component configuration while the service is running.
Records the success or failure (with failure reason) of installing the System Health Validator point.
Records details about the scan process for the Inventory Tool for Microsoft Updates.
Records details about software updates state messages that are created and sent to the management point.
Records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.
Records details about software update compliance scanning and about the download and installation of software updates on the client.
Records details about compliance status for the software updates that were assessed during the compliance scan cycle.
Records details about software update point configurations and connections to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages.
Records details about the Windows Update Agent on the client when it searches for software updates.
Wake On LAN
he following table lists the log files that contain informationrelated to using Wake on LAN.
Records details about which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried.
Records details about wake-up procedures such as when to wake up advertisements or deployments that are configured for Wake On LAN.
Windows Update Agent
The following table lists the log files that contain informationrelated to the Windows Update Agent.
Records details about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components.
The following table lists the log files that contain informationrelated to the WSUS server.
Records details about the WSUS server database information that has changed.
Records details about the software updates that are synchronized from the configured update source to the WSUS server database.
Thanks so much for your posting!