Forefront Edge Security TechCenter >
Forefront Edge Security Forums
>
Forefront Edge Security - Monitoring, Logging, Reporting
>
ISA 2006 - Event ID: 21248 - Log Deletion Failure
ISA 2006 - Event ID: 21248 - Log Deletion Failure
- I use ISA 2006 SP-1 with SQL 2005 installed on the same machine.Soon after installing the ISA already started presenting the alert "Log Deletion Failure."
The server has worked well not having any kind of problem, but I can not resolve this alert. I recently had to rebuild the base of the ISA,but the ISA still showing the error.
The ISA is usually written logs inside the base and the HD is over 31GB of disk space free, the file of the database is currently at 2.7 GB.
Searching on the Internet I found various reports that said that the problem was related to the MOM, but I do not use MOM.
Does anyone have any idea of how to solve this problem?
Event Viewer - Log Deletion Failure Event Type: Error Event Source: Microsoft Firewall Event Category: None Event ID: 21248 Date: 18-07-2008 Time: 12:20:40 PM User: N/A Computer: S05 Description: At least one log deletion failed while performing automatic log maintenance. Error code: 0x80070005. Make sure that there is still enough disk space available for logging.
Answers
Finally I found the answer.
When installed the ISA was select to save the log files in W3C and only then was set ISA to use SQL, but in the meantime he has to create a single file W3C in the folder ISALogs, and is this file that the ISA was trying delete, for some reason he was not able to, I deleted the file manually and now no longer appears the error message.- Marked As Answer byDavi Cavalheiro Friday, May 01, 2009 5:07 PM
All Replies
- Is this happening regularly?
Fire up perfmon, and see if there are any issues on Avg Disk Queue length, Virtual Memory, CPU and Physical memory.
Shijaz Abdulla | MVP - ISA Server | http://blog.shijaz.com - Every time I delete the warning he will reappear again.
So far has not caused any problems, but I would like to resolve this error. - Error code 0x80070005 is "Access Denied".
Maybe ISA is trying to delete today's Log because one of the configured limits is exceeded, most likely the amount of free disk space.
Check the configured minimal free disk space and the actual free space.
HTH,
Oved.
Oved- Proposed As Answer byMohit Saxena - MSFTOwnerWednesday, October 15, 2008 10:03 PM
Finally I found the answer.
When installed the ISA was select to save the log files in W3C and only then was set ISA to use SQL, but in the meantime he has to create a single file W3C in the folder ISALogs, and is this file that the ISA was trying delete, for some reason he was not able to, I deleted the file manually and now no longer appears the error message.- Marked As Answer byDavi Cavalheiro Friday, May 01, 2009 5:07 PM
