Faceted Search once implemented in SharePoint with the default settings, logs every search query a user performs and issues an Access Denied error too (WindowsIdentity:domain\user; Message Cannot open log for source 'Enterprise Library Data', you may not have write access). In an environment with a few thousand users, performing several search queries, your Event Viewer will clog in a short time.
Usually you find this issue when you get the following error page:
[InvalidOperationException: Cannot open log for source 'Enterprise Library ExceptionHandling'. You may not have write access]
And you might notice other syntoms like: target audiences not working well, search not working.
Solution:
1. BEST: turn off the Faceted Search Logging
2. Increase the Event Viewer log file size.
3. Decresease the days of an event expiration.
Turn Off the Faceted Search Logging:
1. Go to the web.config of all your sharepoint web application in all farm servers
2. Set the following filter property to Off:
|
<add source="Faceted Search Logging" formatter="Text Formatter" log="Application" machineName="" listenerDataType="Microsoft.Practices..." traceOutputOptions="None" filter="All" Type="Microsoft.Practices.EnterpriseLibrary.Logging...." name="Formatted EventLog TraceListener" /> |