Exchange 2007 SP1 Log files grow out of control (10GB/hr ~3 hours +)

I have an exchange 2007 SP1 CCR cluster and the active node log files grow out of control at about 10GB per hour with no database growth, No accounts seem to grow either and there are no indications in message tracking that this amount of data is being transmitted during the symptom time. I've ran the client monitor and saw nothing unusual. A backup clears the logs naturally. The symtoms stop as randomly as they start with no indication as to what is generating or how we can stop the sudden growth. There is enough space on the disk for this to happen for a long period of time (150GB ~15 hours) but my client is worried that it might occur for a longer period. The longest observed is around 9 hours. Restarting one of the hub transport servers (nlb clustered) seems to stop the growth but it doesnt matter which one (of the two) is restarted. This could simply be coincidence. Any help is greatly appreciated.
LVL 1
marc4497Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

firemanf29Commented:
The Exchange Database will only grow if it has no free/available space within it. Remember Exchange deletes emails inside of it's database but does not resize or shrink the database after a delete.

10 GB an hour does seem large but you may just have that many tractions happening.  Any idea how many emails are coming in and going out?  To me that size would require thousands of transactions per minute.

Have you made sure your Exchange 2007 server is not relaying spam?
0
marc4497Author Commented:
the server is not relaying spam. also, checked message tracking and there are no indications of this many emails being sent/recieved. It's not doing 10GB per hour all the time, just randomly for a period of time (sometimes 1 hour, sometimes 3 hours, sometimes 9...). Emails in and out are below 100 per hour. Size limits are set to 5 or 10 mb per message depending on user. The last occurance was this morning from 4:46am to 8:19am. There was no one in the office during this time (maybe 20 users logged in around 8 am and the rest start trickling in after that (650 users total).
0
marc4497Author Commented:
you are right in saying that would require thousands of transactions per minute. Moving a file from one folder to another causes transaction log data; but I can assure you this isnt happening. There is no mailbox management in place so this is not the culprit either. they do have journalling enabled but that mailbox is not growing at the rate in which the transaction logs are (its below 1GB).

I should add; this is only happening on 1 database. there are 3 different databases on this server each with different log file paths. it is only this 1 database creating the transaction logs; the other 2 do not. Client also indicated that during the peak of this activity, outlook clients and the server itself are extremely sluggish.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

firemanf29Commented:
Is the journal mailbox in the same mailbox store as the database having large transaction files?
0
marc4497Author Commented:
no it is not; it is on a different store.
0
marc4497Author Commented:
bump
0
marc4497Author Commented:
there was a person with an old active sync phone who was putting the phone in a cradle attached to their workstation. when the device tried to sync it caused tons of errors and logs - when we removed the device and added it back to the user the correct way, the problem went away.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Protocols

From novice to tech pro — start learning today.