?
Solved

Exchange 2010 log files growing like crazy

Posted on 2011-03-18
6
Medium Priority
?
2,062 Views
Last Modified: 2012-05-11
Hi,
We have a client who is running Exchange 2001 SP1 who is seeing a large amount of transactions logs being created every minute.

I took a sample of the logs today and this is what I am seeing so far.

At 1:12 there are 227 logs for just that minute

At 1:14pm there are 470 logs for just that minute.


Backup Exec 2010 R2 with the Exchange agent does run at night so the previous day’s log files are getting purged.   The issue is with why are so many logs files being generated.   There are over 125 gig of logs files in the Mailbox Database folder.  

I have checked with other clients we have running Exchange 2010 and I am not seeing this issue with any of them.    

The server is a 2008 R2 Member Server.  

Any help would be greatly appreciated.  I haven’t seen this before, at least not on this scale of volume.
0
Comment
Question by:montyjenkins
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 4

Accepted Solution

by:
ucando1 earned 2000 total points
ID: 35170189
Run a backup using the Windows Backup, see if that deletes the logs. Then see if the file grows that fast again.

How many users are there, and is the server spamming. Always good to check the queue.
0
 

Assisted Solution

by:montyjenkins
montyjenkins earned 0 total points
ID: 35170196
The logs do get deleted after the backup runs at night.   It's the current day log that grows like a mother!

50-60 users

The server send out via a 3rd party smarthost so easy to see outbound traffic which doesn't show anything out of the ordinary.  

Agree on your thinking though.   I am going along the same lines.   The server is a little busy but not that busy to be generating over 200 logs per minute before the data get written to the database.
0
 
LVL 4

Expert Comment

by:rjpilcher
ID: 35170197
I've noticed this before on Exchange 2010.  Here's some things to look at:

1. Are mailbox moves taking place?
2. Are users importing mail from PSTs
3. Is it possible someone is deleting a lot of items?

Is this recurring or something recent?
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 

Author Comment

by:montyjenkins
ID: 35170202
1. No moves taking place.  The server was put into production hmmmm just under a month ago.

2. All of the users "50-60" of them had their PST's imported into the store.  This client didn't have Exchange Prior.  They were using a POP service.     No imports of PST's have taken place for the past month.

3. Not postive on the deleting, I would have to check but I would guess no since this event is re-occurring.
0
 

Author Closing Comment

by:montyjenkins
ID: 35767586
Thanks for the input into this question.
0

Featured Post

Want to be a Web Developer? Get Certified Today!

Enroll in the Certified Web Development Professional course package to learn HTML, Javascript, and PHP. Build a solid foundation to work toward your dream job!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question