Re: Enormous amount of log files
http://lmgtfy.com/?q=iphone+activesync+log+files It's been discussed frequently, including here. On Tue, Mar 1, 2011 at 2:17 AM, Vandael Tim tim.vand...@khlim.be wrote: “I'm betting that you've got a new iPhone user doing ActiveSync” Any reason why you’re guessing that? Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] *From:* Kurt Buff [mailto:kurt.b...@gmail.com] *Sent:* maandag 28 februari 2011 16:25 *To:* MS-Exchange Admin Issues *Subject:* Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] http://www.khlim.be/ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be/ http://www.khlim.be/ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be/ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage002.gifimage003.png
Re: Enormous amount of log files
Well, aside from my CEO nearly blowing up my Exchange server with hers (thanks to good disk space monitoring she didn't quite make it, by about two hours), it's happened to several others on this list, and seems to be a well-known phenomenon generally. On Mon, Feb 28, 2011 at 23:17, Vandael Tim tim.vand...@khlim.be wrote: “I'm betting that you've got a new iPhone user doing ActiveSync” Any reason why you’re guessing that? Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] *From:* Kurt Buff [mailto:kurt.b...@gmail.com] *Sent:* maandag 28 februari 2011 16:25 *To:* MS-Exchange Admin Issues *Subject:* Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] http://www.khlim.be --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be http://www.khlim.be --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage003.pngimage002.gif
Re: Enormous amount of log files
isn't that for the x.0 iOS devices? I thought the subsequent updates fixed this long ago. ??? On Tue, Mar 1, 2011 at 1:19 PM, Kurt Buff kurt.b...@gmail.com wrote: Well, aside from my CEO nearly blowing up my Exchange server with hers (thanks to good disk space monitoring she didn't quite make it, by about two hours), it's happened to several others on this list, and seems to be a well-known phenomenon generally. On Mon, Feb 28, 2011 at 23:17, Vandael Tim tim.vand...@khlim.be wrote: “I'm betting that you've got a new iPhone user doing ActiveSync” Any reason why you’re guessing that? Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] *From:* Kurt Buff [mailto:kurt.b...@gmail.com] *Sent:* maandag 28 februari 2011 16:25 *To:* MS-Exchange Admin Issues *Subject:* Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] http://www.khlim.be --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be http://www.khlim.be --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage003.pngimage002.gif
Re: Enormous amount of log files
Not everyone installs the latest updates. Phones still for sale at retail shops are probably running outdated versions of IOS. - Sean On Tue, Mar 1, 2011 at 9:30 AM, sms adm sms...@gmail.com wrote: isn't that for the x.0 iOS devices? I thought the subsequent updates fixed this long ago. ??? On Tue, Mar 1, 2011 at 1:19 PM, Kurt Buff kurt.b...@gmail.com wrote: Well, aside from my CEO nearly blowing up my Exchange server with hers (thanks to good disk space monitoring she didn't quite make it, by about two hours), it's happened to several others on this list, and seems to be a well-known phenomenon generally. On Mon, Feb 28, 2011 at 23:17, Vandael Tim tim.vand...@khlim.be wrote: “I'm betting that you've got a new iPhone user doing ActiveSync” Any reason why you’re guessing that? Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] *From:* Kurt Buff [mailto:kurt.b...@gmail.com] *Sent:* maandag 28 februari 2011 16:25 *To:* MS-Exchange Admin Issues *Subject:* Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] http://www.khlim.be/ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be/ http://www.khlim.be/ --- To manage subscriptions click here: * http://lyris.sunbelt-software.com/read/my_forums/* or send an email to *listmana...@lyris.sunbeltsoftware.com* with the body: unsubscribe exchangelist http://www.khlim.be/ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage003.pngimage002.gif
Fwd: Enormous amount of log files
Somehow this doesn't seem to have made it back to the list, so here it is... Kurt -- Forwarded message -- From: Kurt Buff kurt.b...@gmail.com Date: Tue, Mar 1, 2011 at 10:57 Subject: Re: Enormous amount of log files To: Vandael Tim tim.vand...@khlim.be I'm assuming you're using Exchange 2003. I'm also assuming that you know where the log files are, since you're graphing them. First, get the latest version of logparser from MSFT and install it. Then google for logparser activesync exchange 2003 and take a look at the first 3 or 4 hits - that will tell you who is using activesync, among other things. Then, get grep and wc from sourceforge - either http://unxutils.sf.net or http://gnuwin32.sf.net, and use the unique IDs of the activesync users as parameters. That should get you started. On Tue, Mar 1, 2011 at 04:58, Vandael Tim tim.vand...@khlim.be wrote: Hello Kurt, Can you also tell me on what *.log files I should perform this command? Far as far as I’m understanding the command correctly it’s giving me the count of all lines where the @-symbol is present. What is the meaning of this output? Sorry for the questions but I’d really want to find out what is causing this amount of log files. To give you an example of what happens: The difference between the 2 log-file volumes. And here you can clearly see that is happens since saterday: Thnx! Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: maandag 28 februari 2011 16:25 To: MS-Exchange Admin Issues Subject: Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Enormous amount of log files
Thnx for the answers all, but for what it's worth I'm running 2010 SP1. As far as I understand, all versions of Exchange have this issue with older iOS software. And for some reason it stopped yesterday... Will monitor it closely to prevent my volumes from flooding :-) Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: woensdag 2 maart 2011 0:11 To: MS-Exchange Admin Issues Subject: Fwd: Enormous amount of log files Somehow this doesn't seem to have made it back to the list, so here it is... Kurt -- Forwarded message -- From: Kurt Buff kurt.b...@gmail.com Date: Tue, Mar 1, 2011 at 10:57 Subject: Re: Enormous amount of log files To: Vandael Tim tim.vand...@khlim.be I'm assuming you're using Exchange 2003. I'm also assuming that you know where the log files are, since you're graphing them. First, get the latest version of logparser from MSFT and install it. Then google for logparser activesync exchange 2003 and take a look at the first 3 or 4 hits - that will tell you who is using activesync, among other things. Then, get grep and wc from sourceforge - either http://unxutils.sf.net or http://gnuwin32.sf.net, and use the unique IDs of the activesync users as parameters. That should get you started. On Tue, Mar 1, 2011 at 04:58, Vandael Tim tim.vand...@khlim.be wrote: Hello Kurt, Can you also tell me on what *.log files I should perform this command? Far as far as I’m understanding the command correctly it’s giving me the count of all lines where the @-symbol is present. What is the meaning of this output? Sorry for the questions but I’d really want to find out what is causing this amount of log files. To give you an example of what happens: The difference between the 2 log-file volumes. And here you can clearly see that is happens since saterday: Thnx! Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: maandag 28 februari 2011 16:25 To: MS-Exchange Admin Issues Subject: Re: Enormous amount of log files grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Enormous amount of log files
Hello all, I've ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I've moved some log files so the database was mountable again. Now I'm running a backup and turned circular logging on to free up some logs. Thnx! [cid:image001.png@01CBD72D.051F5230] Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.behttp://www.khlim.be/ Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.bemailto:tim.vand...@khlim.be [http://www.khlim.be/AD/COMMUNICATIE/mail_footer_khlim.gif] http://www.khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistinline: image001.pnginline: image002.gif
RE: Enormous amount of log files
I've had some success in the past using this method. http://blogs.msdn.com/b/scottos/archive/2007/07/12/rough-and-tough-guide-to-identifying-patterns-in-ese-transaction-log-files.aspx There may be better tools out there now, but it's certainly pinpointed potential culprits about 50% of the time. Nick From: Vandael Tim [mailto:tim.vand...@khlim.be] Sent: 28 February 2011 08:53 To: MS-Exchange Admin Issues Subject: Enormous amount of log files Hello all, I've ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I've moved some log files so the database was mountable again. Now I'm running a backup and turned circular logging on to free up some logs. This electronic message contains information from CACI International Inc or subsidiary companies, which may be confidential, proprietary, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named above. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify us immediately at postmas...@caci.co.uk Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure they are actually virus free. CACI Limited. Registered in England Wales. Registration No. 1649776. CACI House, Avonmore Road, London, W14 8TS. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: Enormous amount of log files
grep @ *.log | wc -l I'm betting that you've got a new iPhone user doing ActiveSync On Mon, Feb 28, 2011 at 00:52, Vandael Tim tim.vand...@khlim.be wrote: Hello all, I’ve ran into a database problem this morning. As you can see in the image there are a huge amount of log files generated this weekend. Since the volume is only 30GB it ran full with the associated problem of the database being dismounted. Is there any way to detect what/who generated all this traffic? To solve the issue, I’ve moved some log files so the database was mountable again. Now I’m running a backup and turned circular logging on to free up some logs. Thnx! Met vriendelijke groeten, *KHLim* Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be *Tim Vandael* ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 476 22 45 22 tim.vand...@khlim.be [image: Description: bar] http://www.khlim.be --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage001.pngimage002.gif
