Search WWW Search

Tuesday, August 22, 2006

Exchange: Transaction Log Files Growing Rapidly; Case Scenarios


An Exchange admins worst nightmare is to come into work one morning to find out your partition housing your transaction log files has been filled up with an abundant amount of log files. You continue to monitor your disk space which is filling up at a rapid pace. What to do? In this article I will share my experience in dealing with these situations.

Note: If you are currently experiencing rapid log file growth and your partition housing your log files is running low on disk space, enable circular logging immediately. This will flush all log files as they are committed to your database. This will prevent your partition housing your log files from filling up and causing your store to dismount.

XADM: How to Modify the Circular Logging Setting

Case Scenario #1 Script Gone Haywire

In this scenario, I came into work to find out that the log files have grown tremendously and eating up disk space at rate of almost 1-2GB an hour. Because of the rate at which the logs being generated, users were complaining about messages being delayed. This is because the rate at which the log files were being committed to the database could not keep up with the rate that they were being generated in additional to a high store.exe process.

The root cause analyses was a script that an employee wrote which was part of our ticketing system. I ran MS Netmon which is a packet sniffer to determine if I could find the source of where the traffic was being generated from, which helped me to pinpoint it to our ticketing system.

You can download Netmon from The file is zipped and contains a password. The unzip password is "trace"

Case Scenario #1 Routing Loop (Migration)

In this scenario, I also experienced rapid log file growth. This scenario occured during a migration from 5.5 to 2003. The root cause analyses for this situation was more of how the organization's mail topology was configured.

This organization used a Sendmail server as it's frontend and thus hosted the MX record for the organization say It then forwarded to the Exchange backend using an alias table. The Exchange backend environment thus hosted an internal MX record say xyz.local. The recipient policy of the Exchange org was configured as:

Secondary: xyz.local

Internet mail would arrive to, the Sendmail server would lookup the alias table and forward to user@xyz.local which would deliver to the Exchange Org. Now because our Exchange Org did not host all users for for the recipient policy of, the SMTP Virtual Server was configured to "Send all unknown recipients to" another Sendmail smarthost.

The loop was caused because the alias table on the Sendmail server was not maintained. Therefore, when an email arrived at the frontend Sendmail server destined to, it would look up the alias table and see it mapped to user@xyz.local and forward it to the Exchange Org. The Exchange Org did not have this recipient and would foward it out to a Smarthost because "Send all unknown recipients to" was configured. This Smarthost would then send it back to the frontend Smarthost causing a loop.

Resolution was to enable "Filter Recipients who are not in the directory" in the Global Settings in Exchange System Manager in addition to having a procedure to maintain a current alias table.

James Chong
MCSE M+, S+, MCTS, Security+

How useful was this article? Want to see a tip not listed? Please leave a comment.


Blogger flynbrian said...

Great Post...I ran in to this problem today and your post saved my bacon. Thanks again!

11:39 AM  
Blogger Anil Nair said...

extremely usefull. great post.

8:10 AM  
Blogger longge said...

replica handbags which is commonly shortened to LV has been a French fashion house founded since 1854. The label designer bags is well known for its monogram and is featured on all their products, such as leather goods ready-to-wear shoes, watches, jeweler and many more. All of louis vuitton are sold through small boutiques in high-ended department stores. It's one of the leading international fashion houses in the world. The manufactures of louis vuitton handbags since 19th century are still making the luggage by hand.

5:58 PM  
Blogger longge said...

Now that replica handbags is selling all his goods at a high price, while the lower quality goods were rapidly available, we had to know that people were going to use this to trade in cash to this opportunity. LV is the most replicated designers, while some people say that it is the biggest compliment you could give someone. The replicas of sold louis vuitton handbags are really common in the USA; If you live in a large city you may notice it yourself. If you happen to notice a louis vuitton bags sold at a price which is cheap it is made from poor quality materials and are also sold for half the price a normal lv is sold for.

6:18 PM  
Blogger Simple Luxury said...

Burberry Outlet Store Online
Handbags Outlet Store Online

8:52 AM  

Post a Comment

<< Home

xml:lang="en" lang="en"> MS Exchange Tips: Exchange: Transaction Log Files Growing Rapidly; Case Scenarios