SOLVED

Exchange Server 2016 Hybrid Server Log Management

%3CLINGO-SUB%20id%3D%22lingo-sub-160173%22%20slang%3D%22en-US%22%3EExchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160173%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20hybrid%20environment%20where%20all%20my%20mailboxes%20are%20in%20Exchange%20Online%2C%20but%20I%20have%20an%20on-premises%20Exchange%20Server%202016%20server%20as%20my%20hybrid%20server%20to%20support%20mailbox%20management%20as%20well%20as%20multi-function%20devices%20(scanners)%20routing%20scanned%20documents%20via%20email%20to%20my%20cloud%20mailboxes.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENo%20mailboxes%20are%20stored%20on%20the%20server.%26nbsp%3B%20I%20do%20have%20Windows%20Server%20Backup%20running%20as%20an%20%22Exchange%20aware%22%20backup%20to%20truncate%20transaction%20logs%2C%20but%20what%20I%20am%20seeing%20is%20significant%20growth%20in%20IIS%20and%20other%20Exchange%20related%20logs%20that%20do%20not%20appear%20to%20be%20truncated%20by%20backups.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIs%20anyone%20aware%20of%20any%20best%20practices%20for%20maintaining%20log%20growth%20on%20a%20hybrid%20server%3F%26nbsp%3B%20Because%20it%20is%20not%20hosting%20any%20mailboxes%20and%20simply%20acting%20as%20a%20relay%20to%20Exchange%20Online%2C%20the%20server%20is%20not%20configured%20with%20abundant%20resources.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-160173%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-162020%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162020%22%20slang%3D%22en-US%22%3E%3CP%3EChristopher%2C%3CBR%20%2F%3E%3CBR%20%2F%3EYou're%20welcome.%20In%20addition%20to%20my%20previous%20post%2C%20you%20can%20follow%20the%20steps%20discussed%20in%20the%20link%20to%20disable%20the%20Performance%20and%20Diagnostic%20logging%20completely%20if%20you're%20not%20interested%20in%20the%20logs.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcollaborationpro.com%2Fexchange-2013-logging%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcollaborationpro.com%2Fexchange-2013-logging%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EOtherwise%20you%20can%20schedule%20the%20script%20as%20discussed%20earlier%20to%20remain%20some%20logging.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3ERuud%20Gijsbers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161366%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161366%22%20slang%3D%22en-US%22%3E%3CP%3ERaud%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20the%20post.%26nbsp%3B%20Great%20information%20on%20controlling%20transport%20logs%2C%20but%20the%20logs%20that%20I%20see%20growing%20without%20an%20easy%20way%20to%20truncate%20are%20the%20performance%20and%20diagnostics%20logs%20outside%20of%20the%20transport%20service.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161343%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161343%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Christopher%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20some%20configurable%20settings%20on%20the%20Transport%20Service.%20When%20you%20run%20%3CEM%3EGet-TransportService%20%7C%20fl%20*MaxDirectorySize*%20%3C%2FEM%3Eyou%20find%20the%20maximum%20directory%20size%20for%20some%20logging%20directories.%20You%20can%20change%20these%20settings%20with%20%3CEM%3ESet-TransportService%3C%2FEM%3E.%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20change%20the%20%3CEM%3ELogMaxAge%3C%2FEM%3E%20for%20these%20different%20logging%20types.%20%3CEM%3EGet-TransportService%20%7C%20fl%20*LogMaxAge*%3C%2FEM%3E%20shows%20the%20maximum%20log%20age%20for%20the%20different%20logging%20types.%20These%20settings%20can%20also%20be%20changed%20with%20%3CEM%3ESet-TransportService%3C%2FEM%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBesides%20those%20settings%2C%20you%20will%20still%20need%20to%20clean%20your%20IIS%20logs%20as%20suggested%20earlier.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3ERuud%20Gijsbers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161329%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161329%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20post.%26nbsp%3B%20I%20was%20hoping%20there%20was%20an%20integrated%20way%20in%20Exchange%20to%20truncate%20or%20limit%20log%20growth%2C%20but%20if%20it's%20a%20manual%20(or%20scripted)%20process%20still%2C%20I%20guess%20it's%20better%20than%20nothing.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161183%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161183%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20could%20also%20take%20a%20look%20at%20this%20script%20to%20archive%20IIS%20logs%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fpractical365.com%2Fexchange-server%2Fpowershell-script-iis-logs-cleanup%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpractical365.com%2Fexchange-server%2Fpowershell-script-iis-logs-cleanup%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FIIS-Logs-Compress-and-3eb41a5b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FIIS-Logs-Compress-and-3eb41a5b%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3EJoel%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160316%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160316%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Christopher%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20article%20could%20help%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F31117.exchange-2013-logging-clear-out-the-log-files.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F31117.exchange-2013-logging-clear-out-the-log-files.aspx%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I have a hybrid environment where all my mailboxes are in Exchange Online, but I have an on-premises Exchange Server 2016 server as my hybrid server to support mailbox management as well as multi-function devices (scanners) routing scanned documents via email to my cloud mailboxes.

 

No mailboxes are stored on the server.  I do have Windows Server Backup running as an "Exchange aware" backup to truncate transaction logs, but what I am seeing is significant growth in IIS and other Exchange related logs that do not appear to be truncated by backups.

 

Is anyone aware of any best practices for maintaining log growth on a hybrid server?  Because it is not hosting any mailboxes and simply acting as a relay to Exchange Online, the server is not configured with abundant resources.

6 Replies
Highlighted
Best Response confirmed by Christopher Lee (Occasional Contributor)
Highlighted
Highlighted

Thanks for the post.  I was hoping there was an integrated way in Exchange to truncate or limit log growth, but if it's a manual (or scripted) process still, I guess it's better than nothing.

Highlighted

Hello Christopher,

 

There are some configurable settings on the Transport Service. When you run Get-TransportService | fl *MaxDirectorySize* you find the maximum directory size for some logging directories. You can change these settings with Set-TransportService.

You can also change the LogMaxAge for these different logging types. Get-TransportService | fl *LogMaxAge* shows the maximum log age for the different logging types. These settings can also be changed with Set-TransportService.

 

Besides those settings, you will still need to clean your IIS logs as suggested earlier.

 

Best regards,

Ruud Gijsbers

Highlighted

Raud,

 

Thanks for the post.  Great information on controlling transport logs, but the logs that I see growing without an easy way to truncate are the performance and diagnostics logs outside of the transport service.

Highlighted

Christopher,

You're welcome. In addition to my previous post, you can follow the steps discussed in the link to disable the Performance and Diagnostic logging completely if you're not interested in the logs.
https://collaborationpro.com/exchange-2013-logging/

Otherwise you can schedule the script as discussed earlier to remain some logging.

Best regards,

Ruud Gijsbers