locked
How come my Exchange transaction log always fill up every weekend ? RRS feed

  • Question

  • Hi Everyone,

    I'm still confused and don't understand of why my Exchange Server 2007 SP1 transaction log always fills up quickly during the weekend ?

    in my previous diagnostic steps I have done the following actions:

    1. Pin point the shared mailbox (SharedMailbox1) that cause the problem in Storage Group 1 and then move the Shared mailbox onto Storage Group 2, after several weekend yes the problem arise again in the Storage Group 2.

    2. Export the old SharedMailbox1 content, disable the SharedMailbox1 (mark as delete), create new one with the same name (including aliases and its permissions) and then importing the exported content into the new one.

    Somehow the transaction log still growth uncontrollably and always 90% full in the weekend? in which I believe there were very low email traffic in my company.

    Any suggestion and help would be greatly appreciated.

    /* Server Support Specialist */
    Sunday, April 3, 2011 6:25 AM

Answers

  • Yes there is EV Server 8.0 which archive all of the mailboxes.

    suppose I can extract the Message Tracking log from the HT server, which section that I should pay attention to ?


    /* Server Support Specialist */
    Well, just look for increased traffic from/to this shared mailbox. Does it have any specific purpose that could be tied to extra activity during Weekends? Also have a look into the logons to the mailbox with Get-LogonStatistics to see if any unusual account might be accessing it.
    Jesper Bernle | Blog: http://xchangeserver.wordpress.com
    • Marked as answer by Gavin-Zhang Tuesday, April 26, 2011 10:01 AM
    Monday, April 4, 2011 11:45 AM

All replies

  • What if you do a Message Tracking for the SMTP address of your problematic mailbox. Do you see a lot of traffic generated from this mailbox?
    Jesper Bernle | Blog: http://xchangeserver.wordpress.com
    Sunday, April 3, 2011 10:48 AM
  • thanks for the reply man, hm.. let me have a look by extracting the Message tracking log from my HT --> is that the correct log to dump into CSV ?
    /* Server Support Specialist */
    Sunday, April 3, 2011 11:14 AM
  • Is there something that run's specifically on the weekends? Any archiving jobs? Does the shared mailbox have any outlook rules that are suspect?


    James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
    Sunday, April 3, 2011 2:50 PM
  • Yes there is EV Server 8.0 which archive all of the mailboxes.

    suppose I can extract the Message Tracking log from the HT server, which section that I should pay attention to ?


    /* Server Support Specialist */
    Sunday, April 3, 2011 3:13 PM
  • Yes there is EV Server 8.0 which archive all of the mailboxes.

    suppose I can extract the Message Tracking log from the HT server, which section that I should pay attention to ?


    /* Server Support Specialist */
    Well, just look for increased traffic from/to this shared mailbox. Does it have any specific purpose that could be tied to extra activity during Weekends? Also have a look into the logons to the mailbox with Get-LogonStatistics to see if any unusual account might be accessing it.
    Jesper Bernle | Blog: http://xchangeserver.wordpress.com
    • Marked as answer by Gavin-Zhang Tuesday, April 26, 2011 10:01 AM
    Monday, April 4, 2011 11:45 AM
  • Hi Albert,

    Any update for your issue?

    Regards!
    Gavin

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, April 5, 2011 10:06 AM
  • All done, it is actually the Symantec Enterprise Vault server 8.0 SP4 cause this problem with the Exchange Transaction log due to this article explanation: http://www.symantec.com/docs/TECH128522
    /* Server Support Specialist */
    Wednesday, April 27, 2011 1:48 AM