SBS2003 w/Exchange 2003 Log File Question

Best way to approach my situation. Server running low on space after large amount of email was moved creating 13G of log files, C: low on disk space, log file location C:\Program Files\Exchsrvr\mdbdata. I dismounted the store and copied the log files on C: in the mdbdata folder to D:\mdbdata. I then went ahead and rean eseutil /mh and verified a clean shutdown. EE recommendations for next step(s).

1. delete .log files on C: mount the store and do a full backup ASAP (always nervous deleting log files.

2. In First Storage Group Properties change the following
- Transaction log location to: D:\mdbdata
- System path location: D:\mdbdata
- Log file prefix" leave alone.
- Mount the store
- Perform a fill backup
LVL 17
WORKS2011Austin Tech CompanyAsked:
Who is Participating?
 
Alan HardistyCo-OwnerCommented:
Just enable Circular logging.  That will purge the logs, then run the backup and disable circular logging:

http://support.microsoft.com/kb/314605

Much easier!
0
 
Alan HardistyCo-OwnerCommented:
Best approach is to stop messing with Exchange.

Just run the SBS built-in backup and it will purge the logs during the backup.

Nothing else to do - no messing about - no chance of breaking anything.
0
 
S_K_SCommented:
If you are thinking of either of the 2 options then I'd personally would never suggest deletion of log files and if there is no other option apart from deleting them then Yes a backup needs to be done immediately. To be on safe side since you know the databas eis in clean shutdown take a offline backup i.e. copy the EDB and STM files somewhere with you (If anything goes wrong you always can revert back to these files and once the successful backup is done feel free to delete them.

Step 2 is the best option.

Refer the below few articles to assist you with the steps you are going to perform. Moving log files to another drive manually or automatically whichever you are comfortable with.

http://support.microsoft.com/kb/822676
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/25d6cc7d-92a1-4dc4-b2bc-217f116db78b
http://support.microsoft.com/kb/270693
http://support.microsoft.com/kb/270694/EN-US

In case of any confusion feel free to ask.

- SKS
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
WORKS2011Austin Tech CompanyAuthor Commented:
Hi Alan, I tried this. There was 500m of free disk space and I started a ntbackup, problem was the .edb is 30G and before 2G was backed up the disk space was below 175m, there's no way the ntbackup would finish before the space went to zero and the backup failed and store dismounted.

That's why I posted, done this before but always worried about making a situation where one missed step can cause allot more work than necessary or if there is a better recommendation.

Thanks for the quick response.
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
S_K_S copying the .ebd and .stm files now, will take about 45 minutes but better to be on the safe side. Thanks.
0
 
S_K_SCommented:
Few options are available. Do let is know which option you prefer at this point in time and we would be more than glad to guide you accordingly.

- SKS
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
Alan this may sound like overkill but enable circular logging and then mount the store and restart the information services or enable circular logging then mount the store? May not matter either.
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
reason I don't just mount the store is because it eats up so much space so quickly and there's only 288m, so I want to make sure it begins deleting log files sooner than later.
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
I did the procedure and it's counting up in free space, I'll award points in a minute.

Thank you to both of you.
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
I turned on circular logging and the logs deleted, the free space came back. I then disabled circular logging, restarted the information store and started a full back, as the backup ran the log files began coming back until the space ran out again. I now have no free space and the full exchange backup failed with the following error:


Backup Status
Operation: Backup
Active backup destination: File
Media name: "exchangebackup.bkf created 9/12/2012 at 9:22 PM"

Volume shadow copy creation: Attempt 1.
Backup of "DATASERVER\Microsoft Information Store\First Storage Group"
Backup set #1 on media #1
Backup description: "Set created 9/12/2012 at 9:22 PM"
Media name: "exchangebackup.bkf created 9/12/2012 at 9:22 PM"

Backup Type: Normal

Backup started on 9/12/2012 at 9:22 PM.
The 'Microsoft Information Store' returned 'Error returned from an ESE function call (d).' from a call to 'HrESEBackupRead()' additional data '-'The 'Microsoft Information Store' returned 'Error returned from an ESE function call (d).' from a call to 'HrESEBackupRead()' additional data '-'
The operation was ended.
Backup completed on 9/13/2012 at 12:34 AM.
Directories: 2
Files: 3
Bytes: 76,023,223,410
Time:  3 hours,  12 minutes, and  18 seconds

----------------------

The operation did not successfully complete.

----------------------
0
 
Alan HardistyCo-OwnerCommented:
As per my comment:

Enable circular logging, backup, then re-enable circular logging.

Sounds like you have another issue going on if you are generating tons of logs.

Please take a look at the logs and see if one particular device / user is generating the logs for you as they may be pulling mail via POP3 from their mailbox and putting the mail into their mailbox, creating an infinite loop!

Either that or someone may be spamming through your server; check the outbound queue for millions of outbound emails.  If that is the case, I have an article to help.

Alan
0
 
Alan HardistyCo-OwnerCommented:
Another option is to change the log file path to the D: drive to save the C: drive getting chewed up:

http://support.microsoft.com/kb/821915
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
I don't have any space to start the store is my only option to delete log files?
0
 
Alan HardistyCo-OwnerCommented:
Did you enable circular logging again?
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
If I delete log files I delete only log files, correct and leave the E00.chk and E00.log alone or do I delete everything but the E00.chk?
0
 
Alan HardistyCo-OwnerCommented:
Ideally move the log files (after stopping the store) and then restart the store.
0
 
Simon Butler (Sembee)ConsultantCommented:
If you need space to run the backup, the safest option is to just compress the oldest log files.
Select everything that is older than today, right click, choose Properties. Then choose Advanced and select Compress. Click OK and wait. The logs will then be compressed and give you some space back. They compress significantly.
DO NOT select the directory, as that will cause problems. Just the files themselves. Once the compression has completed, run a backup to flush them out.

Simon.
0
 
WORKS2011Austin Tech CompanyAuthor Commented:
Thanks for the help, turns out the circular logging was my first approach and simple, my concern at the time is the space was actually 0 and I wasn't sure if some space was needed to move the files, worried may cause problems trying this step however worked fine. Once space was available ran ntbackup and log files were created again, 16G worth which caused the C: drive to go back to 0 before it finished so I was in the same situation again where this time I moved them to D: started the store and will run a ntbackup this evening in case there is issues again with the log files. Good news there is more space available on D: but I don't want to interfere while clients are coming into work. It's interesting 16G of logs come back immediately, if it causes any problems I'll create another post.

Thanks again for the help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.