Solved

Log files in the system32\log files folder

Posted on 2008-10-17
1
2,054 Views
Last Modified: 2008-10-17
Need to free up diskspace on the c:\ of a Window2003 SBS Server.
there is over 1GB of text log files in the c:\windows\system32\logfiles folder
the subfolders from there are W3SVC1 and W3SVC4
the text files are name ex(date).log     so for example ex101008.log
they date back to the beginning of the server's life
Are they safe to delete?  Here is an example of what is in part of one

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-10-04 00:00:03
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-10-04 00:00:03 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:03 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:03 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:13 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:13 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:13 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:16 192.168.1.1 GET /secars/secars.dll h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mc 200 0 0
2008-10-04 00:00:16 192.168.1.1 POST /secars/secars.dll h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mc 200 0 0
2008-10-04 00:00:18 192.168.1.1 GET /secars/secars.dll h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mc 200 0 0
2008-10-04 00:00:23 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:23 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:23 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:33 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:33 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:33 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:43 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:43 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:43 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:47 127.0.0.1 GET /secars/secars.dll action=238 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:53 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:53 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:00:53 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:03 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:03 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:03 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:13 127.0.0.1 POST /secars/secars.dll action=235&reset=1 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:13 127.0.0.1 GET /secars/secars.dll action=36 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:13 127.0.0.1 GET /secars/secars.dll action=38&usn=18 80 - 127.0.0.1 Java/1.5.0_14 200 0 0
2008-10-04 00:01:15 192.168.1.1 GET /secars/secars.dll h=A11AAD19352CCE55EF306D605786D8C8CA224C2F45AC3FDDA63D2196981BE5461C4C189D47DAEA8A0B9A59981C45FA0E2C2FBC6DDFDD6B6B934E625468E6F2E020C67A8266A0C03
0
Comment
Question by:citechsolutions
1 Comment
 
LVL 4

Accepted Solution

by:
ThorSG1 earned 125 total points
ID: 22744159
The folders W3SVC1 and W3SVC4 correspond to websites.  You need to ask yourself what type of logging you need on your websites.
The number after W3SVC corresponds to the Identifier number for the website.

Open the properties of one of your websites.  On the first tab: Web Site there is a section checked Enable logging.  In that section there is a properties button.  Hit that.  You are able to define how often the logs are overwritten or if at all.  You can change the location of the log files if you have a better location.  Say another drive with free space available.  Under the Advanced tab you can choose what you want in the log file.  This will cut down on how much space is being taken up.

I don't recommend turning logging off completely.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now