Exchange Server 2013 Log Files growing rapidly for no apparent reason?
The environment is Windows 2012 Hyper-V / Exchange Server 2013
I have a mail database on a VHDX drive with the database log files located on another separate VHD.
I am currently NOT performing any jobs (Move mailbox .etc..) however the log files are growing at a rate of 22Gb per hour.
This was not happening during the evening and has only just started when staff arrived at the office and opened Outlook.
How is it possible to find out what is causing the Log files to grow?
All the outlook users have Cache mode enabled. Is it possible that this is caused by synchronization errors?
Most mailboxes are over 10gb. Largest mailbox is 19Gb.
There are 28 mailboxes on this database.
I have a mail database on a VHDX drive with the database log files located on another separate VHD.
I am currently NOT performing any jobs (Move mailbox .etc..) however the log files are growing at a rate of 22Gb per hour.
This was not happening during the evening and has only just started when staff arrived at the office and opened Outlook.
How is it possible to find out what is causing the Log files to grow?
All the outlook users have Cache mode enabled. Is it possible that this is caused by synchronization errors?
Most mailboxes are over 10gb. Largest mailbox is 19Gb.
There are 28 mailboxes on this database.
what's in the log file to start with?
Have you checked the event log?
Have you checked the event log?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Hi,
take a look at Message Queue, if there are some emails that are stuck. I had the same situation once, and it was because of email that was stuck in queue. After I have deleted it, everything was fine :)
Regards,
Ivan.
take a look at Message Queue, if there are some emails that are stuck. I had the same situation once, and it was because of email that was stuck in queue. After I have deleted it, everything was fine :)
Regards,
Ivan.
ASKER
Ivan:
Thanks but no that's not it. Just looked at the "Queue Viewer" from the Exchange toolbox and all queues are = 0
NOTE:
This was happening on Friday (23rd) during the day and I thought it was because I was doing a lot of maintenance on the server, moving mailboxes etc..
Then over the weekend I successfully fragmented the edb with the ESEUTIL. On Saturday and Sunday all was peaceful on the exchange server.
Now today at 9am when all the staff came into the office, the log file started growing. 13gb of Logs in the first hour.
Currently (2pm) I have 75,000 log files since this morning (each 1Mb in size)
Since this only seems to be happening during the time when staff have switched on Outlook. I think it will be something to do with Outlook creating errors with the server.
Thanks but no that's not it. Just looked at the "Queue Viewer" from the Exchange toolbox and all queues are = 0
NOTE:
This was happening on Friday (23rd) during the day and I thought it was because I was doing a lot of maintenance on the server, moving mailboxes etc..
Then over the weekend I successfully fragmented the edb with the ESEUTIL. On Saturday and Sunday all was peaceful on the exchange server.
Now today at 9am when all the staff came into the office, the log file started growing. 13gb of Logs in the first hour.
Currently (2pm) I have 75,000 log files since this morning (each 1Mb in size)
Since this only seems to be happening during the time when staff have switched on Outlook. I think it will be something to do with Outlook creating errors with the server.
ASKER
Alex Green :
Is there a way to open and read what is in the Log file? I opened it with a text editor and its garbled ascii characters.
I can't see anything major going on in the event viewer. except:
Microsoft Exchange Diagnostics terminated unexpectedly
Is there a way to open and read what is in the Log file? I opened it with a text editor and its garbled ascii characters.
I can't see anything major going on in the event viewer. except:
Microsoft Exchange Diagnostics terminated unexpectedly
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Big Thanks to Satish Auti!
Exchange Server User Monitor
https://www.microsoft.com/en-us/download/details.aspx?id=11461
I vaguely remember using this tool once before a long time ago.
From the RAW tab I quickly saw there were hundreds of operations from one IP address! (10.0.0.143)
Went to the workstation with the IP address 10.0.0.143 and shut down the PC.
Then I ran the user monitor tool again and checked the size of the log files.
Before this 1 Mb log files were being created at 250 Logs per minute.
Now creating only 1 to 8 Log files per minute
Thanks Satish, you helped me find the culprit.
Now I will start rebuilding the local mail account on this workstation.
Exchange Server User Monitor
https://www.microsoft.com/en-us/download/details.aspx?id=11461
I vaguely remember using this tool once before a long time ago.
From the RAW tab I quickly saw there were hundreds of operations from one IP address! (10.0.0.143)
Went to the workstation with the IP address 10.0.0.143 and shut down the PC.
Then I ran the user monitor tool again and checked the size of the log files.
Before this 1 Mb log files were being created at 250 Logs per minute.
Now creating only 1 to 8 Log files per minute
Thanks Satish, you helped me find the culprit.
Now I will start rebuilding the local mail account on this workstation.
Glad to help you out!!!!
ASKER
User Monitor tool?