Snooper is a tool used to analyze log files in Lync Server. It is a tool we will use over and over to read different kinds of logs and information that come from Lync Servers and endpoints. While Snooper has been available since Microsoft Lync Server 2010 Resource Kit, some of the ways we use it have changed with Lync Server 2013 because the server architecture now includes an element called Centralized Logging Service (CLS). CLS is a great alternative for the previously used solution, the OCSLogger, which required a lot of work to gather data from multiple servers. The architecture is based on a service executable, the Centralized Logging Service Agent (ClsAgent.exe), which runs on each Lync 2013 server, and waits for commands from the service controller CLSControllerLib.dll that sends Start, Stop, Flush, and Search commands to the ClsAgent. The ClsAgent uses scenarios that define which Lync components (providers) at what level will be captured in the...