Link to home
Start Free TrialLog in
Avatar of king daddy
king daddyFlag for United States of America

asked on

Exchange VM has ESE event ID 514

Greetings,

received this error last night (ESE 514) regarding the log files nearing the max log sequence number. I found a few good articles explaining in detail how to go about dismounting the store in question, checking it is in a clean state, moving the log files (including temp and chk), then remounting. Any caveats I should know about? I do have a couple of questions.

I have two storage groups. The error is for storage group 1. Do I need to dismount storage group 2 as well to do this for storage group 1? Do I need to stop any services that would affect storage group 2 accounts from receiving email?

The error states I have 129559 logs left. How can I determine how long that will last me? I looked online but didn't find anything useful (at least to me). I am not sure how to determine the average number of log files we create daily. We have a lot going on right now with a few trials so I suspect we are passing more email than usual.

I guess I am trying to figure out if I need to do this immediately, tonight, or if I can wait until Thursday night as the office is closed Friday.

Thanks
SOLUTION
Avatar of monorail1
monorail1
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of king daddy

ASKER

so if for some reason I get hit during production hours, I can enable circular logging and wait until after hours to move the logs? Logs are being truncated by Veeam nightly backups. Not full though, incremental. Is that OK? They are still being truncated.

I will have to look closer at the articles I read to see if I need to stop the info store service to do this. I found this here last night and was going to follow it.

https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2865-Resetting-the-Exchange-2003-Log-Sequence.html

Per the article I was going to follow, I was going to run this on each database:

"eseutil /mh f:\db1\sg1_db1.edb"

The edb's in this storage group (4 mail stores here, including public) have a total of about 241 GB combining all 4 edb's.

Thanks
SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
OK. SG1 only, that helps as the partners are on SG2.

I will make two backups. I don't think I can fit three. Exchange here is about 600 GB.

I use Veeam and it does truncate nightly.

thanks
See the following post about Exchange backups.  Incremental backups just purge the logs, not backup the database, so make sure you do full backups.


http://technet.microsoft.com/en-us/library/aa996125(v=exchg.65).aspx
mmahaek - so enabling circular logging for a while will clear the logs. Will that reset the sequencing as well? I didn't think it would do that.
I'll do full. Thanks
Do Full backup and if you enable circular it'll auto-flush whatever it needs to keep the log count low.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I am going to run two full Veeam backups, which is exchange-aware, then follow the article I posted earlier. I am also going to change the backups to do a full every weekend instead of every month.

thanks
just wanted to note that the initial 514 was at about 9 PM two nights ago and showed 129559 left. Yesterday around 3 PM another 514 showed up and stated 128559 were left. so if it's about 1,000 per day, on a busy day such as yesterday, I feel comfortable waiting and monitoring.

also wanted to mention that I am migrating to Exchange 2010. That project will start in the beginning of May. With that potentially finishing at the end of May, at least all mailboxes moved over, that's about 60 or so days. At 1,000 per day, roughly, that's still leaves me about half of the stated sequence numbers.

So... after all that, my question is, do I even need to worry about it?

thanks everyone for the help
Just keep an observation on your storage space, personally I would prefer to have flushed logs!
thanks everyone