Event Logging

RBackup Client and Server software can write to the Windows Event Logs. The Event Logs can be monitored by MSP software.

 

Client Software

 

Event Logging can be turned ON and OFF by the following registry key. The client will log events in the Application Log. The Event Logging Source name will be the Product Name or Application Name (as customized in the rcap.ini file).  By default event logging is ON.

HKEY_LOCAL_MACHINE\SOFTWARE\Quantum Tech, Inc.\Remote Backup\Settings

“WriteEventLogs” – REG_SZ – “True”

* Value can be customized via Customize Client Installer (Select the More Advanced Options link.)

 

You can set the default for Client-side event logging ON or OFF in the More Advanced Options screen.

 

 

Events include:

a. Application startup/close events

b. Backup starting and completed events.

Backup Start event will record the following details:

- Backup Start date/time

- Backup Set Name and Type of backup

Backup complete event will record the following details:

- Backup Completed date/time

- Backup Set Name

- Status of backup (Success, Failed, Incomplete, Complete with Exceptions)

- Number of files and bytes selected for backup

- Number of files and bytes transferred

- Warnings Count (if any)

- Exceptions Count (if any)

c. Missed/Failed Backup events (Warnings)

d. Critical Errors (Errors)

 

Event ID:

Each event log entry has a unique event ID for that defines the event reported.

 

5000 – Backup Client (Backup Engine: rbclient.exe) starting.

5001 – Backup Client (Backup Engine: rbclient.exe) exiting.

5002 – Backup Started

5003 – Backup Completed

5004 – Backup Canceled

5005 – Backup Paused

5006 – Backup Resumed

5007 - Backup Window Exceeded. Stopping Backup Session.

5008 - Attempt Window Expired. Stopping Backup Session.

5009 – Backup Stopped. Free space threshold exceeded.

531 – Backup Canceled. Account Suspended on backup server. (Error 531)

530 – Backup Canceled. Login Failure. (Error 530)

5010 – Fatal Error encountered in Backup Engine (rbClient.exe). Refer to event log description and sessionlog/backuplog for more details.

6000 – Backup Client (Tray Application: rbackup.exe) starting.

6001 – Backup Client (Tray Application: rbackup.exe) exiting.

6003 – Missed Backup

6004 – Failed Backup

 

RBS Server Event Logging:

Server event logging is controlled by the registry key “WriteEventLogs” under the Settings branch. To enable Server side event logging check the option ‘Turn ON Event Logging’ in the RBS Manager: Properties (or via Web Manager if installed).

This requires a restart of the RBS Server.

 

The following events will be logged for the server (rbs.exe).

Event ID:

7000 – RBS Server starting

7001 – RBS Server shutting down

7002 – Server started. (Logs Listening Port, local IP, public IP, current audit log and root folder)

7003 – ‘RBS Server’ Service events (Start, paused, stopped, resumed events)

7004 – Server Informational Log (See Log details for description)

7009 – Failed Login from client (Logs username/password)

7010 – Fatal error encountered in RBS Server. Refer to event log description and audit log for more details.

10048 – Port already in use. Server cannot start.