Link to home
Start Free TrialLog in
Avatar of Bill H
Bill H

asked on

SBS 2011 - InetPub LogFiles

Hey all,
We have 3Gb of logfiles in the path:  C:\inetpub\logs\LogFiles\W3SVC1572271583

I need to clear up space as this server runs exchange, is it safe to move or delete these?

Thank you!
ASKER CERTIFIED SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Bill H
Bill H

ASKER

What is the impact of not keeping them?
You can't reference the information in them.

You can review one or two and figure out from what website they are logging... my guess with a number like 1572271583 it's PROBABLY the WSUS web site... 9999 times out of 10000 you won't need them ever.  But once in a while I've had to troubleshoot and having them available is good.
Avatar of Bill H

ASKER

Thanks Lee I'll just move them to another spare drive.
Just to say, with SBS unless you have a lot of activity from outside visiting your company website, RWW and/or OWA, you really don't need to keep the log files beyond about 30 days.  Especially for example if they're from, say, your WSUS website. If you check them every 30 days or so and don't find any unusual activity, and don't see any unusual activity logged in your server event logs, then I feel it's fine to delete them.  Certainly if they're more than 60-90 days old, it's unlikely that you'd need to go back to them IMO.
PS - I just checked on one of the SBS 2011 servers I manage, and that logfile folder does in fact contain the WSUS website logs.
If WSUS breaks, having logs with good data can be useful.  Hence my recommendation to archive.  A DVD is $.10 give or take.  Burn them and put them on a shelf then delete them from the drive.  You may well get rid of the server before you ever touch that DVD again, but .10 is a cheap insurance policy.
Avatar of Bill H

ASKER

We don't use wsus, so I don't need it at all. I actually need to remove wsus.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Lee W MVP (https:#a42447164)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer