SOLVED
Home

Exchange Server 2016 Hybrid Server Log Management

%3CLINGO-SUB%20id%3D%22lingo-sub-160173%22%20slang%3D%22en-US%22%3EExchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160173%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20hybrid%20environment%20where%20all%20my%20mailboxes%20are%20in%20Exchange%20Online%2C%20but%20I%20have%20an%20on-premises%20Exchange%20Server%202016%20server%20as%20my%20hybrid%20server%20to%20support%20mailbox%20management%20as%20well%20as%20multi-function%20devices%20(scanners)%20routing%20scanned%20documents%20via%20email%20to%20my%20cloud%20mailboxes.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENo%20mailboxes%20are%20stored%20on%20the%20server.%26nbsp%3B%20I%20do%20have%20Windows%20Server%20Backup%20running%20as%20an%20%22Exchange%20aware%22%20backup%20to%20truncate%20transaction%20logs%2C%20but%20what%20I%20am%20seeing%20is%20significant%20growth%20in%20IIS%20and%20other%20Exchange%20related%20logs%20that%20do%20not%20appear%20to%20be%20truncated%20by%20backups.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIs%20anyone%20aware%20of%20any%20best%20practices%20for%20maintaining%20log%20growth%20on%20a%20hybrid%20server%3F%26nbsp%3B%20Because%20it%20is%20not%20hosting%20any%20mailboxes%20and%20simply%20acting%20as%20a%20relay%20to%20Exchange%20Online%2C%20the%20server%20is%20not%20configured%20with%20abundant%20resources.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-160173%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-162020%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162020%22%20slang%3D%22en-US%22%3E%3CP%3EChristopher%2C%3CBR%20%2F%3E%3CBR%20%2F%3EYou're%20welcome.%20In%20addition%20to%20my%20previous%20post%2C%20you%20can%20follow%20the%20steps%20discussed%20in%20the%20link%20to%20disable%20the%20Performance%20and%20Diagnostic%20logging%20completely%20if%20you're%20not%20interested%20in%20the%20logs.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcollaborationpro.com%2Fexchange-2013-logging%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcollaborationpro.com%2Fexchange-2013-logging%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EOtherwise%20you%20can%20schedule%20the%20script%20as%20discussed%20earlier%20to%20remain%20some%20logging.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3ERuud%20Gijsbers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161366%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161366%22%20slang%3D%22en-US%22%3E%3CP%3ERaud%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20the%20post.%26nbsp%3B%20Great%20information%20on%20controlling%20transport%20logs%2C%20but%20the%20logs%20that%20I%20see%20growing%20without%20an%20easy%20way%20to%20truncate%20are%20the%20performance%20and%20diagnostics%20logs%20outside%20of%20the%20transport%20service.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161343%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161343%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Christopher%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20some%20configurable%20settings%20on%20the%20Transport%20Service.%20When%20you%20run%20%3CEM%3EGet-TransportService%20%7C%20fl%20*MaxDirectorySize*%20%3C%2FEM%3Eyou%20find%20the%20maximum%20directory%20size%20for%20some%20logging%20directories.%20You%20can%20change%20these%20settings%20with%20%3CEM%3ESet-TransportService%3C%2FEM%3E.%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20change%20the%20%3CEM%3ELogMaxAge%3C%2FEM%3E%20for%20these%20different%20logging%20types.%20%3CEM%3EGet-TransportService%20%7C%20fl%20*LogMaxAge*%3C%2FEM%3E%20shows%20the%20maximum%20log%20age%20for%20the%20different%20logging%20types.%20These%20settings%20can%20also%20be%20changed%20with%20%3CEM%3ESet-TransportService%3C%2FEM%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBesides%20those%20settings%2C%20you%20will%20still%20need%20to%20clean%20your%20IIS%20logs%20as%20suggested%20earlier.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3ERuud%20Gijsbers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161329%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161329%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20post.%26nbsp%3B%20I%20was%20hoping%20there%20was%20an%20integrated%20way%20in%20Exchange%20to%20truncate%20or%20limit%20log%20growth%2C%20but%20if%20it's%20a%20manual%20(or%20scripted)%20process%20still%2C%20I%20guess%20it's%20better%20than%20nothing.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161183%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161183%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20could%20also%20take%20a%20look%20at%20this%20script%20to%20archive%20IIS%20logs%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fpractical365.com%2Fexchange-server%2Fpowershell-script-iis-logs-cleanup%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpractical365.com%2Fexchange-server%2Fpowershell-script-iis-logs-cleanup%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FIIS-Logs-Compress-and-3eb41a5b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FIIS-Logs-Compress-and-3eb41a5b%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3EJoel%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160316%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Server%202016%20Hybrid%20Server%20Log%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160316%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Christopher%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20article%20could%20help%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F31117.exchange-2013-logging-clear-out-the-log-files.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F31117.exchange-2013-logging-clear-out-the-log-files.aspx%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Christopher Lee
Occasional Contributor

I have a hybrid environment where all my mailboxes are in Exchange Online, but I have an on-premises Exchange Server 2016 server as my hybrid server to support mailbox management as well as multi-function devices (scanners) routing scanned documents via email to my cloud mailboxes.

 

No mailboxes are stored on the server.  I do have Windows Server Backup running as an "Exchange aware" backup to truncate transaction logs, but what I am seeing is significant growth in IIS and other Exchange related logs that do not appear to be truncated by backups.

 

Is anyone aware of any best practices for maintaining log growth on a hybrid server?  Because it is not hosting any mailboxes and simply acting as a relay to Exchange Online, the server is not configured with abundant resources.

6 Replies

Thanks for the post.  I was hoping there was an integrated way in Exchange to truncate or limit log growth, but if it's a manual (or scripted) process still, I guess it's better than nothing.

Hello Christopher,

 

There are some configurable settings on the Transport Service. When you run Get-TransportService | fl *MaxDirectorySize* you find the maximum directory size for some logging directories. You can change these settings with Set-TransportService.

You can also change the LogMaxAge for these different logging types. Get-TransportService | fl *LogMaxAge* shows the maximum log age for the different logging types. These settings can also be changed with Set-TransportService.

 

Besides those settings, you will still need to clean your IIS logs as suggested earlier.

 

Best regards,

Ruud Gijsbers

Raud,

 

Thanks for the post.  Great information on controlling transport logs, but the logs that I see growing without an easy way to truncate are the performance and diagnostics logs outside of the transport service.

Christopher,

You're welcome. In addition to my previous post, you can follow the steps discussed in the link to disable the Performance and Diagnostic logging completely if you're not interested in the logs.
https://collaborationpro.com/exchange-2013-logging/

Otherwise you can schedule the script as discussed earlier to remain some logging.

Best regards,

Ruud Gijsbers

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Dev channel update to 80.0.355.1 is live
josh_bodner in Discussions on
67 Replies