Hello,
It became apparent to us today that we had CBS.log files that were far over the standard 50MB size. Some were in the tens of Gigabytes. So I got the idea to run a report in SCCM that would search for instances of this log file that was over the standard 50 MB. For those of you who don't know the behaviour of this log file, when it reaches 50MB it is supposed to be archived into a .cab file for space. As my researched showed, this is a pretty regular problem for some people where the service stops doing this. We have a workaround that we can use in order to fix this on an individual basis, however we want a means of identifying these machines before it becomes a problem. I did some research and found some people doing very similar things here:
https://social.technet.microsoft.com/Forums/en-US/b055165a-6387-4502-9b2b-9babef6fe7f4/report-query-for-file-size-of-specific-file-in-sccm?forum=configmgrgeneral
I tried to follow steps mentioned in that article in our Test environment. I created a software inventory client setting to search for the CBS.log file under the directory C:\Windows\Logs\CBS\. I used the right click tools to run the software inventory cycle on the local machines. Then I created a report that would display all cbs.log files on the machines that are over 50MB, waited awhile and nothing was showing up in the report. So I adjusted the report to display all cbs.log files that are over 1MB. Nothing yet.
So I am unsure if the software inventory is just taking awhile to gather this, or if I have done something wrong in the process. Am I missing something?
This is the query I created for the report that I got from the above link:
SELECT SYS.NetBIOS_Name0, SYS.User_name0, v_GS_CollectedFile.FileName, v_GS_CollectedFile.FileSize, v_GS_CollectedFile.FilePath
FROM v_R_System SYS
LEFT OUTER JOIN v_GS_CollectedFile on SYS.ResourceID= v_GS_CollectedFile.ResourceID
Where v_GS_CollectedFile.FileName like '<CBS.log>'
and v_GS_CollectedFile.FileSize >1