Link to home
Start Free TrialLog in
Avatar of Scott Townsend
Scott TownsendFlag for United States of America

asked on

IIS Log on my Exchange 2010 server is Filling up with entries from my Office and Home Mac machines

my IIS Log on my Exchange 2010 server is Filling up with entries from my Office and Home Mac machines.
Both Macs are using Outlook 2016, latest updates.

There are a couple other User using Macs with the same version and they don't show up in the log like that.
The Log files are averaging 1.8GB a day and 99% of them are entries from my 2 Machines.


Here are the Log entries:
2018-04-23 10:27:39 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 14
2018-04-23 10:27:39 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 10
2018-04-23 10:27:39 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 23
2018-04-23 10:27:39 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 10
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 8
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 22
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 9
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 9
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 10
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 20
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 11
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 9
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 18
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 11
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 9
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 19
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 10
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 18
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 11
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 40
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 12
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 13
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 27
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 8
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 11
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 8
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Home Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 19
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 11
2018-04-23 10:27:40 <On-Prem-Server-IP> POST /autodiscover/autodiscover.xml - 443 <AD Username> <Office Mac IP> AppleExchangeWebServices/287.4.1+accountsd/113 200 0 0 

Open in new window

Avatar of timgreen7077
timgreen7077

I can't tell whats home and whats on-prem, but its not uncommon for IIS logs to grow because it's based on what every activity for Web services are being utilized. If you only have 1 CAS server and all the connections are going to that  CAS then you can expect alot of logs growth, also you may be a more active user with mobile devices, active sync connections, or autodiscover connections from your home PC. Its safe to delete these logs. The logs will just continue to grow, so I would suggest only keeping a select number of days. I only keep the logs for 15 days personally.
Avatar of Scott Townsend

ASKER

Of the 1.8gb log file, then entries in it are mostly (99%) my 2 machines.
We have 95 users that all have phones and tablets that are also connected to the sever.

My Home mac isn't doing anything special, just logged in and outlook running in the background.

I didn't want to mention this to muddy the waters,but this has been going on and only getting worse for the past 2.5 years.  And here is the interesting part.... in the past month I migrated my mailbox to the cloud. The entries in the log are from my outlook clients talking to the on-Prem server. My outlook is setup to talk to the office 365 server. So I'm not sure why my outlook is querying Autodiscover so many times in a single minute.

I was thinking it's trying to access other users calendar data? But still others have other calendars mounted too and they are not anywhere close to the quantity that I'm in the log.

I was hoping the log entries might give a clue as to what it's asking for. Why would it need to talk to Autodiscover so often?
Does everyone use a MAC or just you?
ASKER CERTIFIED SOLUTION
Avatar of timgreen7077
timgreen7077

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Out of the 95, there are maybe 7 of us that use a Mac to talk to the exchange server.

I can see if I can make sure that the calendar and contact apps on the Mac are not causing it. Since there are soooo many in a minute it should be easy to tell. (-;

Thanks
sounds good
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial