Move MS Exchange 2016 Diagnostics Log Location

Jason Pickard
Jason Pickard used Ask the Experts™
on
We have recently installed MS Exchange 2016 (Build 1591.10) and were in the process of moving all of the log locations to another drive.

We ran into an issue where we could not locate any program, service, or process that corresponds to the following location:

C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\Logs\

This folder is generating a tremendous amount of logs and is eating away at our primary C:\ partition.

The only thing that I have found related to the logs generated in the aforementioned folder is a registry location:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Search Foundation for Exchange\Diagnostics

If anyone would happen to know what service, process, or application is generating  these logs it would be of great help!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Paul MacDonaldDirector, Information Systems

Commented:
Look under "Daily Performance Logging" on this link.

The author notes that it doesn't seem to be possible to move the log location in Exchange 2016, as one could in Exchange 2013, but there is information on stopping the two services that generate the log files in question.
timgreen7077Exchange Engineer
Distinguished Expert 2018

Commented:
You can't disable or move these logs, and they don't clear. You can see the below link and run the script to safely remove those logs. I have this setup to run as a scheduled task about every 20 days. These are just logs and the script will safely remove them with no issues.

https://gallery.technet.microsoft.com/office/Clear-Exchange-2013-Log-71abba44

Author

Commented:
Update:

I have successfully modified the corresponding registry entries:
(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Search Foundation for Exchange\Diagnostics)
"LogDir"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\Logs\"
"UsageLogDir"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\Logs\"
"LogPath"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\"
"LogDiskSpaceUsageGB"=dword:00000006

I then rebooted and had to make a folder in the corresponding drive location for the logs to start generating.

This still doesn't explain what is generating these logs and where else I can modify the settings for this service/process/app.
I have successfully modified the corresponding registry entries:
(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Search Foundation for Exchange\Diagnostics)
"LogDir"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\Logs\"
"UsageLogDir"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\Logs\"
"LogPath"="H:\Exchange\Logs\V15\Bin\Search\Ceres\Diagnostics\"
"LogDiskSpaceUsageGB"=dword:00000006


This seems to work without issue after several reboots and updates the registry settings remain unchanged.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial