Exchange 2010 server - transaction logs growing

after migration from exchange2003 to exchange2010. Transaction Logs are growing up.
I don't know why, but today Exchange2010 stoped working because Log-files drive was full.
I have VM-Ware and resize log files drive about 50GB.. and after 12 houres only 20GB were free.
my database size  is 140GB
my transaction log file size is 94GB at the moment.
and I have only 100 Mailboxes

what's wrong  with exchange?

my exchange2010 version: 14.2.247.5
iconscmAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
I would suggest add more space and divide users into Multiple Databases as even Log growth can be due to Mailbox Database corruption

- Rancy
0
iconscmAuthor Commented:
I don't see anything in logs about corrupted database.
0
Trish BenningfieldTECHGRLCommented:
You went from Exchange 2003 to Exchange 2010.  I've done a few of these, and often the thing that isn't thought about during the transition is enough space for logging.  Please know that there may be nothing wrong with Exchange, there is a big difference in Exchange 2003 vx 2007, and then again 2010.  Please review the following article to calculate and ensure you have the correct amount of space allocated for logging.  This also covers problematic log growth.

http://blogs.technet.com/b/exchange/archive/2011/11/09/capacity-planning-yes-transaction-log-space-is-critical-to-keeping-your-databases-healthy-and-mounted.aspx
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Logical or Pointer corruption isnt logged nor if some Mailbox is corrupt or Looping .... Ideally such things get resolved only with Move Mailboxes or Repair but Repair isnt a better Option as one cant assume the data loss

- Rancy
0
Stelian StanNetwork AdministratorCommented:
Do you have users with iPhones on your organization? If you have and they are running iOS 6.1 then that may be the cause: https://devcentral.f5.com/community/group/aft/2165837/asg/50
0
iconscmAuthor Commented:
Yes, I have about 30 users using iPhone with iOS 6.1 .. and I read about it on microsoft website http://support.microsoft.com/kb/2814847 , but how can I determine that the issue with iPhone is ? where can I find logs pointing/represent to this issue?
Thanks.
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
You will find this data in IIS logs and many a people are having to shutoff those iOS devices and get them downgraded or waiting for a Patch

- Rancy
0
Stelian StanNetwork AdministratorCommented:
The problems occur when a user accepting an exception to recurring calendar event: https://support.apple.com/kb/TS4532

Microsoft recommends to block iOS 6.1 users : http://appleinsider.com/articles/13/02/12/microsoft-recommends-blocking-ios-61-users-due-to-exchange-server-issue
0
Stelian StanNetwork AdministratorCommented:
The Microsoft workaround for this problem: http://support.microsoft.com/kb/2814847?wa=wsignin1.0
0
iconscmAuthor Commented:
I've just  checked (Event ID 9826).  These stats represent 2 hours of activity:

Starting from 13.02.2013 13:36:55 service Exchange Transport has performed this activity on the server:
RPC Operations: 22025.
Database Pages Read: 1135 (of which 258 pages preread).
Database Pages Updated: 47487 (of which 41816 pages reupdated).
Database Log Records Generated: 56513.
Database Log Records Bytes Generated: 26595697.
Time in Server: 35408 ms.
Time in User Mode: 7125 ms.
Time in Kernel Mode: 297 ms.

that means I have 26GB Logs in 2 hours ? .. how can I find which user generate so many logs ?
0
iconscmAuthor Commented:
I run this command and could determine mailbox, that move a lot of data:
[PS] C:\Windows\system32>$stats = Get-StoreUsageStatistics -Database "Mailbox Database"
[PS] C:\Windows\system32>$stats | ? {$_.DigestCategory -eq 'LogBytes'} | group MailboxGuid |sort count -Descending | Sel
ect -first 1 -ExpandProperty Group | sort SampleTime | ft -a MailboxGuid,Sample*,Log*

MailboxGuid                          SampleId SampleTime          LogRecordCount LogRecordBytes
-----------                          -------- ----------          -------------- --------------
6ff7e793-b185-4dac-8de7-66792fdb7308        5 13.02.2013 15:06:35            606         101314
6ff7e793-b185-4dac-8de7-66792fdb7308        4 13.02.2013 15:16:36           1456         658270
6ff7e793-b185-4dac-8de7-66792fdb7308        3 13.02.2013 15:26:35           1137         481880
6ff7e793-b185-4dac-8de7-66792fdb7308        2 13.02.2013 15:36:32            769          74246
6ff7e793-b185-4dac-8de7-66792fdb7308        1 13.02.2013 15:46:32           1901        3618299
6ff7e793-b185-4dac-8de7-66792fdb7308        0 13.02.2013 15:56:32           1056         455361

what can you say ?

schould I block only this one user?
0
Stelian StanNetwork AdministratorCommented:
On my environment I would do it, but that's up to you.
0
Stelian StanNetwork AdministratorCommented:
Just make sure that one is not the CEO or another BIG BOSS.
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
I would block the user and let him know about the issue ..... as i cant take issue on server due to such stuff and take Outages

- Rancy
0
iconscmAuthor Commented:
and how can I empty transaction log now?
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
I would either have Circular logging for the time or else Move any log older than an Hour to another location (Please dont delete anything until you move and ensure everything is working fine for few hours) as its better to be safe guarded

- Rancy
0
iconscmAuthor Commented:
ok, I  told user to remove his accoutnt on iPhone.. but after 30min I see that transaktion logs still growing up...

how can I determine which user's iphone I should block?

Thanks
0
Stelian StanNetwork AdministratorCommented:
Download the script from this page: http://exchangeserverpro.com/block-ios-61-exchange-2010
find who is running iOS 6.1 and then block those users.
0
iconscmAuthor Commented:
I can't block all iso 6.1 users.. I would like to find the exactly user, which iphone is wrong
0
Shibu KuttanSenior Server AdministratorCommented:
use ExMon and monitor which user causing this issue.
0
iconscmAuthor Commented:
thanks, I found this post http://hermannmaurer.blogspot.ie/2012/05/exchange-2010-transaction-logfiles-grow.html?m=1 , so I could find users causing so many logs. it were all sync logs with calendar. and I found 3 users..
After backup, the logs were empty, and until now it has growed only about 2GB. (for 5 hours)

I'll close this post for now.
0
iconscmAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for iconscm's comment #a38888396

for the following reason:

I found by myself the post in internet describing, how determine my issue. but no solution is possible in my case
0
Trish BenningfieldTECHGRLCommented:
It looks like clonyxiro and shibu81 helped you find the problem and the tools to determine the cause.  I'm just curious, after so much correct assistance, why you would close the case without assigning points?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
iconscmAuthor Commented:
Sorry... maybe I was too fleet... sorry.. The problem isn't resolved for me.. and the normaly solutaion is to wait upgrade from apple or microsoft... but you're right, I was wrong... these both people helped me to understand, that no solution is possible with ios 6.1 and exchnage at the moment.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.