I would start by disabling the AV. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Dubyn Sent: Tuesday, May 10, 2005 10:46 PM To: Exchange Discussions Subject: Slightly long - Log files filling up disk for 1 Storage Group (that is backed up)
Customer has a mixed Windows 2003 AD and a mixed Exchange 2003 environment. Yesterday morning they moved some mailboxes from an E2K server to an E2K3 server around 7:30am. It took about 1 hour to move about 4GB. At 3pm the Storage Group the mailboxes were moved to crashed. Turned out the log files had filled up the drive (10GB). Backups the night before were completed successfully and all log files were flushed at that time. The Storage Group is only 11GB is size total. For a quick fix, we moved the log file drive to a larger drive and did a backup. After that, log files continued to fill up the drive, sometimes being created at a pace of 3/minute. Did another backup and then turned on circular logging. However, need to figure out what could possibly be causing the large amount of log files. Here's what we have tried so far: 1. AntiVirus - ran a manual scan on the entire Storage Group with Symantec AV for Exchange 4.5.2 (it was resident on the box anyway w/updated defs). No viruses found 2. Using Message Tracking, checked to see if a large email was sent to a large number of people, but didn't find anything greater than an 18MB file sent to 3 people. 3. Checked Public Folder replication, which seems fine, and no new PF's were added today 4. All SMTP queues were almost empty 5. Turned up Diagnostic Logging but did not see anything out of the ordinary that I couldn't track down to "this error can be safely ignored" We have not had any user complaints about mail not flowing. I've checked Public Folder replication and it seems to be working correctly. Both new Folders and contents in the folders are replicating to the other Exchange servers. Any suggestions on how to troubleshoot this? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
