RE: Exchange no longer deleting Message Tracking Logs older than x
- From: Ken-T <KenT@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 30 Nov 2007 01:37:00 -0800
Robert,
have been checking daily and up to now the logs are being deleted daily at
01:00
I suspect that we have an occasional performance issue....
If Exchange is dealing with a large number of events, spam attempts etc at
01:00 then it decides to not delete the logs.
I also suspect that after I changed to number of days before dletion and
re-started smtp (as per MS support article) then something was not quite
right, and that a server reboot set it right agin.
I wonder if a full restart of ALL exchange services was needed, rather than
just smtp service.
If and when I can, I will set the log deletion up to 10 or 15 days and see
what happens.
If it starts not deleting again, I will post or conatct you and send the
detailed analysis stuff.
Sounds fair?
Ken
"Robert Li [MSFT]" wrote:
Hi Ken,.
Thanks for your reply.
Since you set to delete the logs older than 7 days, you shouldn't have 9
days' logs. The issue may be caused by server performance. Please
monitoring the system for two days to see if the problem can be reproduced.
If the problem persists, please help me collect the MPS Report for deep
research.
I am looking forward to hear from you.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<Thread-Topic: Exchange no longer deleting Message Tracking Logs older than
x
<thread-index: Acgs53uLs/VR3uh7TqK8VnxziKJZ1Q==
<X-WBNR-Posting-Host: 207.46.19.197
<From: =?Utf-8?B?S2VuLVQ=?= <KenT@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <9277245A-2D18-468E-83C9-D46C583727FD@xxxxxxxxxxxxx>
<06o6R9LLIHA.7908@xxxxxxxxxxxxxxxxxxxxxx>
<Subject: RE: Exchange no longer deleting Message Tracking Logs older than x
<Date: Thu, 22 Nov 2007 01:10:10 -0800
<Lines: 180
<Message-ID: <86DB829B-5147-4CD0-9375-D10B7CA4357C@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77459
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi Robert,
<
<Thanks for responding. Firstly, yes, you are correct, issue is that the
<exchamge message tracking logs are not being removed automatically.
<
<But now the sort of good news, I checked this morning and bingo,
<I have a 5008 from MSExchangeSA that a log was deleted.
<I still have 9 days in the dir, instead of 8 (today plus 7).... but it's a
<step forward, it shows that MSExchangeSA is cleaning when it can.
<It seems to show that security settings for the dir and the service itself
<are working.
<
<As I was checking MS support for any info on this issue I seem to remember
<seeing an article that mentioned that if Exchange was "busy" at the time
that
<SA tried to clear the logs, it might fail.
<I see that the log was deleted at 01:00 in the morning. On 2 days a week
the
<final part of a full backup may still be running at that time. Plus,
recently
<we and many others have had a huge increase in spam and NDR spamming. We
were
<having up to 3000 attemts a day to get email to users without accounts so
<exchange is dealing with a lot of connections.
<
<Question - shall we just "keep an eye" on this for a while to see how it
<goes on?
<Or, shall I prepare the deatiled info you requested?
<Your choice, will willingly prepare further info it it may help identify
and
<fix an issue that may be affecting others.
<
<Ken
<
<
<
<
<
<"Robert Li [MSFT]" wrote:
<
<> Hi Ken,
<>
<> Thanks for posting in our newsgroup.
<>
<> From you description, I know that the Exchange Message Tracking logs
can't
<> be removed automatically. If that's not right, please don't hesitate to
let
<> me know.
<>
<> Based on my research, please take the following steps to narrow down
this
<> issue:
<>
<> Step 1:Some Anti Virus software can cause such issue, please check to
see
<> if the Anti Virus software has excluded message tracking logs from
scanning.
<>
<> More info:
<>
<> Overview of Exchange Server 2003 and Antivirus Software
<> http://support.microsoft.com/?id=823166
<>
<> Step 2:Please restart the Exchange System Attendant Service to see if
the
<> older message tracking logs can be deleted.
<>
<> 1. Run the service.msc command.
<> 2. Right click Exchange System Attendant and click Restart.
<> 3. Test again.
<>
<> Step 3: By default the message tracking logs is saved in c:\Program
<> Files\Exchsrvr folder. Please check the c:\Program Files\Exchsrvr folder
<> NTFS permission:
<>
<> Server Operators and System should have the following permissions:
<>
<> Full Control
<> Modify
<> Read & Execute
<> List Folder Contents
<> Read
<> Write
<>
<> If the problem persists, please help me collect the following
information
<> for deep research:
<>
<> 1. What important change did you made before the issue first occurred?
<>
<> 2. MPS Report
<>
<> 1) Visit
<>
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
<> 15706/MPSRPT_Exchange.EXE to download the file.
<> 2) Run the MPSRPT_Exchange.EXE on the server box.
<> 3) Wait for 10~15 minutes.
<> 4) Open Windows explorer, navigate to
%SYSTEMROOT%\MPSReports\Exchange\cab\
<> 5) Send the .cab file directly to v-robeli@xxxxxxxxxxxxx with subject:
<> 41009334-Exchange no longer deleting Message Tracking Logs older than x
day.
<>
<> I am looking forward to hear from you.
<>
<> If you need further assistance, please don't hesitate to let me know.
<>
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <Thread-Topic: Exchange no longer deleting Message Tracking Logs older
than
<> x day
<> <thread-index: AcgsKiwCrJLPOYzATi25iKy985ohsg==
<> <X-WBNR-Posting-Host: 207.46.192.207
<> <From: =?Utf-8?B?S2VuLVQ=?= <KenT@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <Subject: Exchange no longer deleting Message Tracking Logs older than x
day
<> <Date: Wed, 21 Nov 2007 02:35:01 -0800
<> <Lines: 17
<> <Message-ID: <9277245A-2D18-468E-83C9-D46C583727FD@xxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 7bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77292
<> <NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <Hi,
<> <
<> <The option to delete message tacking logs was set to the default 7 days
<> and
<> <the logs were being deleted.
<> <Recently changed mailing to no longer pickup via POP but use normal
SMTP
<> <relayed from our ISP. Set Message Tracking deletion up to 15 days....
and
<> it
<> <no longer deleted evn at 20/21 days old.
<> <Set back down to 7, same problem.
<> <Even tried turning off the message tracking and turning it back on to
<> create
<> <the log folder with correct rights etc, still not working.
<> <(Even tried deleting all logs and waiting till over 9 days was up,
still
<> no
<> <deletion).
<> <
<> <Does anyone have a tip how to get the auto-deletion working again?
<> <
<> <
<> <
<> <
<>
<>
<
- References:
- RE: Exchange no longer deleting Message Tracking Logs older than x day
- From: Robert Li [MSFT]
- RE: Exchange no longer deleting Message Tracking Logs older than x
- From: Ken-T
- RE: Exchange no longer deleting Message Tracking Logs older than x
- From: Robert Li [MSFT]
- RE: Exchange no longer deleting Message Tracking Logs older than x day
- Prev by Date: Re: VPN PPTP problem
- Next by Date: Re: VPN PPTP problem
- Previous by thread: RE: Exchange no longer deleting Message Tracking Logs older than x
- Next by thread: Terminal Services errors in Event Viewer in SBS 2003
- Index(es):
Relevant Pages
|
