When you use the Failed Request Tracing module on a server that is running Internet Information Services (IIS) 8.0 in Windows 8 or Windows Server 2012, you find that some entries are missing in the Compact View section of the Failed Request Tracing log file. For example, the first event that is logged in the Failed Request Tracing log file should be the GENERAL_REQUEST_START event. However, in this case, you find that the log file starts with NOTIFY_MODULE_END, as shown in the following example:
You would expect that the Failed Request Tracing log file would start with the GENERAL_REQUEST_START event, as shown in the following example:
NOTIFY_MODULE_END ModuleName="FailedRequestsTracingModule", Notification="BEGIN_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE" 17:13:11.269
NOTIFY_MODULE_START ModuleName="IsapiFilterModule", Notification="AUTHENTICATE_REQUEST", fIsPostNotification="false" 17:13:11.269
NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE" 17:13:11.269
NOTIFY_MODULE_START ModuleName="IsapiFilterModule", Notification="AUTHENTICATE_REQUEST", fIsPostNotification="false" 17:13:11.269
NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE" 17:13:11.269
You would expect that the Failed Request Tracing log file would start with the GENERAL_REQUEST_START event, as shown in the following example:
GENERAL_REQUEST_START SiteId="1", AppPoolId="DefaultAppPool", ConnId="1610612743", RawConnId="0", RequestURL="http://localhost/iisstart.Htm", RequestVerb="GET