Solved

Can I Delete Old Exchange Log Files?

Posted on 2008-10-02
18
2,597 Views
Last Modified: 2010-04-21
Let me begin by saying that I recently (within the past week) took over Exchange admininstration when our admin left. Of course, something had to go wrong. One of our log drives is filling up and is almost out of drive space. We have an Exchange 2003 Server with 3 storage groups. The information store gets backed up every night. The logs for 2 of the storage groups are being automatically removed after each backup, however, there are log files for the third storage group that are over a month old. I read several articles that said you have to be careful about deleting the log files because they may not have been commited to the database yet but wouldn't it be safe to delete the log files that are at least a week old?
0
Comment
Question by:slcain
  • 5
  • 5
  • 4
  • +1
18 Comments
 
LVL 7

Expert Comment

by:swaller
ID: 22627971
The easiest safe way to get rid of the logs is do a NTBackup on that store. That will force commit the logs and safely purge.
0
 
LVL 1

Expert Comment

by:JNRCS
ID: 22627997
What is being used to back them up?  Do you have individual jobs for each of the stores?
0
 
LVL 1

Expert Comment

by:JNRCS
ID: 22628064
My thoughts exactly swaller.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:slcain
ID: 22628074
We are using Symantec NetBackup. There is only one job for all three stores.
0
 

Author Comment

by:slcain
ID: 22628097
I know that it would be best to run a backup, but isn't it safe to assume that a log that is over a week old is already committed?
0
 
LVL 1

Expert Comment

by:JNRCS
ID: 22628117
A successful backup should remove those log entries.  Are there any errors in the logs when you do the backup?  It may be backing up the first two stores, but unable to backup the third.
0
 

Author Comment

by:slcain
ID: 22628143
I will ask the backup admin to check the logs for any errors. In the meantime, is it safe to assume that a log that is over a week old is already committed?
0
 
LVL 1

Expert Comment

by:JNRCS
ID: 22628186
Those log files are used for incremental backups.  They may have been applied, but you should definately wait to hear from your backup admin first if you dont know your backup schedules.
0
 
LVL 7

Accepted Solution

by:
swaller earned 75 total points
ID: 22628365
I am not able to tell you if log files over a week old are safe to delete. My assumption would be NO. If you don't want to perform an NTBackup (takes 5 minutes to initiate and around 20 minutes to run on a 10GB store) then you can go through the tedious process of manually deleting them by following these instructions:

http://support.microsoft.com/kb/240145
0
 
LVL 7

Expert Comment

by:swaller
ID: 22628386
You could also enable *circular logging* and let them purge themselves. There is pros and cons to circular logging but I will let you make that choice on your own. ...but, it would purge your files down to the last 4.
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 22629572
>>is it safe to assume that a log that is over a week old is already committed?

No, the fact that they are there means it is safe to assume they are not committed.

And enabling circular logging is a terrible idea on a server hosting mailboxes - there are no pros, and the only time it is useful is on a front end server, or if you are moving mailboxes.
0
 
LVL 7

Expert Comment

by:swaller
ID: 22634363
"and the only time it is useful is on a front end server, or if you are moving mailboxes."

...and when you are running out of space and don't want to follow the directions for manual delete or run an appropriate backup to commit and purge the logs.


As I stated: "...but, it would purge your files down to the last 4."

I also would recommend that if you are going to infatically state that it is a terrible idea then I believe you should state why you think that.

PS. I am not saying I completely disagree with you. I *am* saying that compared to just deleting all the log files over 1 week old that it's a better option than that.
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 22637230
You are right, I should have specified why it is terrible.  You reduce your restoration capabilities drastically, when there are exponentially better solutions, if you are running out of space, compress the logs - it buys you time to do a backup.
0
 
LVL 7

Expert Comment

by:swaller
ID: 22637303
I agree with that.

Now I have a questions for clarity sake. If you have circular logging enabled on a store that gets nightly full backups. Are you at any greater risk?

Thanks.
0
 

Author Closing Comment

by:slcain
ID: 31502533
Thanks....running the NT backup did the job for the most part. It gave me a warning in the event viewer which told me why the logs could not be purged (because the previous admin had 2 unused mailbox stores that were dismounted) and obviously that keeps the logs from being able to be purged. I mounted the stores, ran a backup again and the logs were deleted.
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 22637390
It depends what you define as risk - I do nightly full backups everywhere as a rule, but the added bonus of transaction logs mean that I can restore to the point of failure, meaning that data is accurate and not a day behind.

Most IT managers aren't expecting that - so it becomes a bonus, minimizing risk.

That said, technically speaking, yes you are at more risk with circular logging no matter what you do.
0
 
LVL 1

Expert Comment

by:JNRCS
ID: 22637403
Depends on the kind of backup.  Also if a database corrupts doesnt this thwart soft recovery  as far as saving information goes?

I was wondering why the backups arent running in the first place.  NTBackup or any backup solution that uses the ese api will not run on a corrupt db.
0
 
LVL 25

Expert Comment

by:kieran_b
ID: 22637477
>>Also if a database corrupts doesnt this thwart soft recovery  as far as saving information goes?

Yes, but restoring from tape and then doing a soft recovery will work.

>>I was wondering why the backups arent running in the first place.

They are running, but his backup isn't running properly - it is not doing a proper backup
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now