1. In the Forefront TMG Management console, in the Troubleshooting node, click the Diagnostic Logging tab.

2. On the Tasks tab, click Enable Diagnostic Logging to enable logging.

3. After you click Enable Diagnostic Logging, click Disable Diagnostic Logging to disable logging.

   Note:
   Disable diagnostic logging when not required. If enabled for an extended period, Forefront TMG performance might be affected.

The following limits are imposed in diagnostic logging:

• The default maximum number of entries for a query is 10,000.
  
  
• There is a maximum timeout of 30 seconds for the query to be run. If the query did not complete before the timeout, an error is displayed. Before you rerun the query, modify the filter.
  
  

You can modify limits by using the registry, as described in the following procedure.

1. Click Start, and then Run. In the Run dialog box, type regedit.

2. Navigate to the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft

3. Right-click Microsoft, and then create the following key if it does not exist: RAT\Stingray\Debug\UI.

4. To specify the maximum number of entries that the query should handle and the timeout value, do the following:

   1. Right-click UI, click New, and then click DWORD (32-bit).
      
      
   2. Create the following value: DIALOG_QUERY_MAX_RECORDS.
      
      
   3. In DIALOG_QUERY_MAX_RECORDS, specify a maximum value for the number of entries that can be handled by the query.
      
      
   4. Create the following value: DIAGLOG_DLVIEWER_TIMEOUT.
      
      
   5. In DIAGLOG_DLVIEWER_TIMEOUT, specify the query timeout value.
      
      

   Important:
   This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, see 256986 (http://support.microsoft.com/kb/256986/) for a description of the Microsoft Windows registry.

Delete events from the diagnostic log as described in the following procedure.

1. In the Forefront TMG Management console, in the Troubleshooting node, click the Diagnostic Logging tab.

2. On the Tasks tab, click Delete Diagnostic Log. Events are deleted from the diagnostic log, and will no longer appear in the event viewer or the output pane.

To run diagnostic logging remotely, add the remote management computer to the required system policy rule in Forefront TMG, as described in the following procedure.

1. In the Forefront TMG Management console, in the Firewall Policy node, double-click the system policy rule Allow remote manage from selected computers using MMC.

2. On the From tab, select Remote Managers Computers, and then click Edit.

3. Verify that the name of the remote management computer is included in the computer set. If it is not included, add the remote management computer.

4. Click OK.

Concepts