URGENT: SBS 2011 Exchange log files filling up drive in minutes!

I need some help with ideas as to why Exchange is generating hundreds of log files every minute.
The server had 0MB free on the C: drive, and come to find out, there were over 119,000 log files in the Exchange server folder (dated within the last 7 days). These files are named like E00001D046C.log. Oddly, the Exchange database store
is not growing in size as you'd expect. Frantically searching for a way to free up space, I turned on circular logging and remounted the store (after freeing up enough space for it to mount!). Almost instantly, the 119,000+ log files disappeared,
but now there are about 40 or so that are constantly being created/written/deleted, over and over and over.
This is a small 5 person office with a 4GB database store. The 119,000 log files were taking up over 121GB. It's nice to have that space back, but something is in a loop, constantly creating log files as fast as the system can write them.
I checked the queues...nothing. Where else can I look to see what might be causing this?
Thanks for the help.
ps. Windows server backup failed about the time this problem started, stating the backup drive is out of space. It's a 2TB drive, backing up 120GB of data. Isn't it supposed to delete old backups to make room for new?

Hi,
Regarding the current issue, please refer to the following article to see if it could help.
Exchange log disk is full, Prevention and Remedies
http://www.msexchange.org/articles-tutorials/exchange-server-2003/planning-architecture/Exchange-log-disk-full.html
If you want to disable Exchange ActiveSync feature, please refer to the following article.
Disable Exchange ActiveSync
http://technet.microsoft.com/en-us/library/bb124502(v=exchg.141).aspx
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Similar Messages

WARNING - Last redo log file switch interval was 6 minutes. Next interval p

Hello!
I just started monitoring my Oracle via ConSol Nagios script.
Now it show`s a Warning because:
WARNING - Last redo log file switch interval was 6 minutes. Next interval presumably >2 minutes. Second incident in a row.
As I do not know much about Oracle I do not understand that message.
a) What does it mean ?
b) Is it really critical ?
Thanks!

>
I just started monitoring my Oracle via ConSol Nagios script.
Now it show`s a Warning because:
WARNING - Last redo log file switch interval was 6 minutes. Next interval presumably >2 minutes. Second incident in a row.
As I do not know much about Oracle I do not understand that message.
a) What does it mean ?
b) Is it really critical ?
>
First of all: This is not an Oracle Error message. Instead, you have a somewhat arbitrarily threshold set in your non-Oracle monitoring tool. If this happens only once in a while - ignore it or modify the threshold.
Generally, frequent fast logswitches can be the cause of performance problems.
If you have Oracle Enterprise Manager in place and Diagnostic Pack licensed, it would give you a much more qualified statement about your Database performance. Also a recommendation to increase the Logfile size in case.
If you look for a procedure to increase the size of your logfiles:
http://uhesse.wordpress.com/2010/01/20/how-to-change-the-size-of-online-redologs/
Kind regards
Uwe Hesse
http://uhesse.wordpress.com

IPhone users lost contact with sbs 2011 Exchange mail after upgrade to iOS 8

When all our users upgraded from iOS 7 to iOS 8 on their iPhones, they couldn't sync with our SBS 2011 Standard Exchange server anymore. Worked fine before upgrade.
SBS 2011 has done all its Windows Updates.
vpn-connection connects and works fine, but Exchange 2010 won't answer.

Hi Delbekk,
Would you please let me confirm whether it was Exchange Server SP3 on the SBS 2011? Did you install necessary
Update Rollups for the Exchange Server?
In addition, please open Event Viewer and check if relevant events were logged in Application log on the Exchange
Server 2010.
Please also check if error message was logged in the Exchange ActiveSync log.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

SBS 2011 & Exchange 2010 (Event ID 103) Search Issues

I have a customer that is having issues with a continuous stream of Event ID 103 "MSExchange Search Indexer" Issues. The details of the event are as follows:
The Microsoft Exchange Search Indexer service failed to initialize due to the following error: (HResult)(-2147467262).
I have tried to do the following:
Run Troubleshoot-CI
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>.\Troubleshoot-CI.ps1
Get-EventLog : No matches found
At C:\Program Files\Microsoft\Exchange Server\V14\Scripts\CITSLibrary.ps1:622 char:40
+ $msftesqlCrashes = get-eventlog <<<< -computername $Server -after $StartTime -logname "Application" -source
$msftesqlServiceName | where {$_.eventId -eq $msftesqlCrashEventId}
+ CategoryInfo : ObjectNotFound: (:) [Get-EventLog], ArgumentException
+ FullyQualifiedErrorId : GetEventLogNoEntriesFound,Microsoft.PowerShell.Commands.GetEventLogCommand
Name IsDeadLocked CatalogStatusArray
JKW-SBS True {Mailbox Database\JKW-SBS}
Run Test-exchangesearch
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>test-exchangesearch
Database Server Mailbox ResultFound SearchTime Error
InSeconds
Mailbox D... JKW-SBS SystemMai... False -1 Time out for test thread.
Tried to manually Rebuild the Text Index
Tried to run the Repair-ExchangeSearchRymLinks
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>.\Repair-ExchangeSearchSymlinks.ps1
Attempting to repair symbolic links
Stopping msftesql-exchange and msexchangesearch services
WARNING: Waiting for service 'Microsoft Exchange Search Indexer (msexchangesearch)' to finish stopping...
Installing symbolic links
Starting msftesql-exchange and msexchangesearch services
Symbolic links restored.
Please run test-exchangesearch to verify installation.
Get-MailboxDatabase
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>Get-MailboxDatabaseCopyStatus -Server $env:ComputerName | Fo
rmat-Table Name,Status,ContentIndex* -Auto
Name Status ContentIndexState ContentIndexErrorMessage
Mailbox Database\JKW-SBS Mounted Healthy
GetSearchIndexForDatabase.ps1
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>.\GetSearchIndexForDatabase.ps1 "Mailbox Database"
Database Name :Mailbox Database
Index Directory: Search Index Does Not Exist for This Database

Hi Robert,
Would you please let me confirm whether had installed any antivirus software on the SBS 2011? If had installed,
please temporarily disable and monitor the result.
Meanwhile, Please refer to following similar thread and check if can help you.
SBS
2011 - MsExchange Search Indexer error 103
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

SBS 2011; Exchange ActiveSync problems in the middle of a migration

Hi
We're in the middle of a migration from SBS 2003 to SBS 2011 and are stuck in the lengthy process of moving users' mailboxes.
At this point, I have about 20 percent of the users' email on the SBS 2011 box, and the rest still on the SBS 2003 box.
Right now I have to quickly deal with an issue that's cropped up with Exchange ActiveSync:
I ran the Connectivity Analyzer for a user (this one's box had been migrated) and got the error below. By the looks of the error, I don't think it matters where the mailbox happens to reside ...
The SBS 2011 box has been set up using a migration install and the procedures listed in the MS migration docs.
At the rate we're going, it's still going to take a while to migrate these mailboxes. (The fact that they began tonight was actually an accident.) If mobile users can't get their mail, I'm going to have a big mess on my hands ...
What do I need to do to get this running properly for all users?
Thanks
CL
An ActiveSync session is being attempted with the server.
Errors were encountered while testing the Exchange ActiveSync session.
Additional Details
Elapsed Time: 793 ms.
Test Steps
Attempting to send the OPTIONS command to the server.
The OPTIONS response was successfully received and is valid.
Additional Details
HTTP Response Headers:
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
Public: OPTIONS, POST
Allow: OPTIONS
MS-Server-ActiveSync: 6.5.7638.1
MS-ASProtocolVersions: 1.0,2.0,2.1,2.5
Content-Length: 0
Date: Fri, 30 May 2014 08:49:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Elapsed Time: 205 ms.
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: <body><h2>HTTP/1.1 403 Forbidden</h2></body>
HTTP Response Headers:
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
MS-Server-ActiveSync: 6.5.7638.1
Content-Length: 44
Content-Type: text/html
Date: Fri, 30 May 2014 08:49:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Elapsed Time: 588 ms.

Hi --
Neither of the Exchange servers is publicly listed as the mail handler for this domain. Mail is preprocessed by a cloud spam filtering service before coming down. So I expect no changes in MX records -- not even a change in the spam filter's delivery IP
address, since that points to my firewall. I'll forward SMTP traffic to the new server when the time comes.
I was told by MS that moving the mailboxes would not disrupt anything as long as both SBS boxes were up and running. And despite what the Connectivity Analyzer showed, people in this office have been receiving email on their mobile phones all day. I've had
a few sporadic reports of people supposedly not getting email on their smartphones, but I can't see how anything I did (basically just move mailboxes at this point) could allow some people's phones to get mail while others' can't, when everyone was getting
mail yesterday.
I also have an odd report from someone who claims that his mobile phone is processing email just fine, but his MacBook running Entourage suddenly can't connect.
Oh well ... The day is over (at least for the workers). Hopefully by the time the workers return on Monday, I'll be back to having just one SBS box on the network.
The mailboxes are being moved A LOT faster than any of the documents I read warned me they would. One document said that a 75 GB database could take close to 48 hours to transfer. And this server's Exchange database was 67 GB ... But last night's
"accident" (I thought I was only prepping a new database when in fact the machine was actively moving email into it) resulted in about 40% of the mailboxes being completely moved by 8 a.m.. And since 5 p.m., when I restarted the move requests,
the machine has completed the moves of about 20% more mailboxes. So I expect this part to be over probably by early morning. (The ones that remain are the really big ones -- still, after I spent a week doing mailbox housekeeping.)
I was also warned about the lengthy conversion requirements for the public folders. I transferred those last weekend. The whole process was over with in less than four hours. Go figure ...
(The public folder transfer did have an annoying side effect -- I kept receiving warning after warning via email from the SBS 2003 box about a high number of items in Exchange's send queues ...)
Thanks
CL

Urgent Database Down - alert log file

Hi Guru's
this is the alert log file - today morning production database went down - any one can you please let me know the problem area!
Thread 1 advanced to log sequence 17563
Current log# 4 seq# 17563 mem# 0: E:\ORACLE\ORADATA\PNLDB\REDO04.LOG
Thu Jan 26 08:12:56 2006
KCF: write/open error block=0x7f0bc online=1
file=12 F:\ORACLE\ORADATA\PNLDB\USERS02.DBF
error=27069 txt: 'OSD-04026: Invalid parameter passed. (OS 520380)'
Thu Jan 26 08:12:57 2006
Errors in file f:\oracle\admin\pnldb\udump\pnldb_ora_1420.trc:
ORA-01115: IO error reading block from file 12 (block # 517514)
ORA-01110: data file 12: 'F:\ORACLE\ORADATA\PNLDB\USERS02.DBF'
ORA-27091: skgfqio: unable to queue I/O
ORA-27069: skgfdisp: attempt to do I/O beyond the range of the file
OSD-04026: Invalid parameter passed. (OS 517513)
ORA-01115: IO error reading block from file 12 (block # 132287)
ORA-01110: data file 12: 'F:\ORACLE\ORADATA\PNLDB\USERS02.DBF'
ORA-27091: skgfqio: unable to queue I/O
ORA-27069: skgfdisp: attempt to do I/O beyond the range of the file
OSD-04026: Invalid parameter passed. (OS 132286)
Thu Jan 26 08:12:57 2006
Errors in file f:\oracle\admin\pnldb\bdump\pnldb_dbw0_956.trc:
ORA-01242: data file suffered media failure: database in NOARCHIVELOG mode
ORA-01114: IO error writing block to file 12 (block # 520380)
ORA-01110: data file 12: 'F:\ORACLE\ORADATA\PNLDB\USERS02.DBF'
ORA-27069: skgfdisp: attempt to do I/O beyond the range of the file
OSD-04026: Invalid parameter passed. (OS 520380)
DBW0: terminating instance due to error 1242
Thu Jan 26 08:12:59 2006
Errors in file f:\oracle\admin\pnldb\udump\pnldb_ora_1420.trc:
ORA-00603: ORACLE server session terminated by fatal error
ORA-01115: IO error reading block from file 12 (block # 517514)
ORA-01110: data file 12: 'F:\ORACLE\ORADATA\PNLDB\USERS02.DBF'
ORA-27091: skgfqio: unable to queue I/O
ORA-27069: skgfdisp: attempt to do I/O beyond the range of the file
OSD-04026: Invalid parameter passed. (OS 517513)
ORA-01115: IO error reading block from file 12 (block # 132287)
ORA-01110: data file 12: 'F:\ORACLE\ORADATA\PNLDB\USERS02.DBF'
ORA-27091: skgfqio: unable to queue I/O
ORA-27069: skgfdisp: attempt to do I/O beyond the range of the file
OSD-04026: Invalid parameter passed. (OS 132286)
Thu Jan 26 08:12:59 2006
Errors in file f:\oracle\admin\pnldb\bdump\pnldb_pmon_3804.trc:
ORA-01242: data file suffered media failure: database in NOARCHIVELOG mode
Instance terminated by DBW0, pid = 956
Thanks
Ravi

You are having problems on disks E\ and F\ - possibly hardware problems.
(Hopefully these disks are not network drives. If they are, your problem might be network contention. Network mounted drives are never a good idea for databases.)
If this is truly urgent, then I encourage you to use your Oracle Support contract to open a service request for assistance.

Log files filling up rapidly

I have noticed that each time I mount a smbfs share the wireless network fails after a couple of minutes, and has to be reset. The log files seem to be filling up rapidly.
The daemon and sys log contain similar lines.
Jan 2 21:51:34 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
Jan 2 21:51:40 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 1
Jan 2 21:53:48 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
Jan 2 21:53:54 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 1
Jan 2 21:56:03 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
Jan 2 21:56:09 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 1
Jan 2 21:58:10 TOSHIBA-User gdmgreeter[21619]: Gtk-CRITICAL: gtk_tree_view_get_selection: assertion `GTK_IS_TREE_VIEW (tree_view)' failed
Jan 2 21:58:10 TOSHIBA-User gdmgreeter[21619]: Gtk-CRITICAL: gtk_tree_selection_unselect_all: assertion `GTK_IS_TREE_SELECTION (selection)' failed
Jan 2 21:58:10 TOSHIBA-User gdmgreeter[21619]: Gtk-CRITICAL: gtk_tree_selection_select_iter: assertion `GTK_IS_TREE_SELECTION (selection)' failed
Jan 2 21:58:10 TOSHIBA-User gdmgreeter[21619]: Gtk-CRITICAL: gtk_tree_view_scroll_to_cell: assertion `GTK_IS_TREE_VIEW (tree_view)' failed
Jan 2 21:58:17 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
Jan 2 21:58:23 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 1
Jan 2 21:58:41 TOSHIBA-User NetworkManager: <info> Updating allowed wireless network lists.
Jan 2 22:00:31 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
Jan 2 22:00:37 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 1
Jan 2 22:02:45 TOSHIBA-User NetworkManager: <info> Supplicant state changed: 0
This might have some bearing on anther issue already logged
Any ideas?
malcolli

Further reading and checking log files it appears that this may be two faults.
The NetwokManager and the Gnome Display Manager.
Now to find out more.
malcolli

[SOLVED] dvd drive not working, log file filled with error.

hi,
i dont know if this is something to do with the latest kernel update or something else that may have occured.
but my dvd writer has stopped working. no light on the front, pressing the button does not open the tray.
it wtill works fine when i boot into windows (dual boot with XP) so it's not a hardware issue.
also my everything.log file is filling up with the following every two seconds!
Mar 1 19:27:56 adax hda: status error: status=0x59 { DriveReady SeekComplete DataRequest Error }
Mar 1 19:27:56 adax hda: status error: error=0x00 { }
Mar 1 19:27:56 adax ide: failed opcode was: unknown
Mar 1 19:27:56 adax hda: drive not ready for command
Mar 1 19:27:56 adax hda: status error: status=0x59 { DriveReady SeekComplete DataRequest Error }
Mar 1 19:27:56 adax hda: status error: error=0x00 { }
Mar 1 19:27:56 adax ide: failed opcode was: unknown
Mar 1 19:27:56 adax hda: drive not ready for command
Mar 1 19:27:56 adax hda: status error: status=0x59 { DriveReady SeekComplete DataRequest Error }
Mar 1 19:27:56 adax hda: status error: error=0x00 { }
Mar 1 19:27:56 adax ide: failed opcode was: unknown
Mar 1 19:27:56 adax hda: drive not ready for command
Mar 1 19:27:56 adax hda: status error: status=0x59 { DriveReady SeekComplete DataRequest Error }
Mar 1 19:27:56 adax hda: status error: error=0x00 { }
Mar 1 19:27:56 adax ide: failed opcode was: unknown
Mar 1 19:27:56 adax hda: drive not ready for command
can someone please help me before i run out of disk space for my logs!
thanks,
ad.
Last edited by adax (2008-03-01 23:25:37)

Hello,
I strongly suspect that you need to change 'ide' to 'pata' in your /etc/mkinitcpio.conf
#HOOKS="base udev autodetect ide scsi sata usb keymap filesystems"
HOOKS="base udev autodetect pata scsi sata usb keymap filesystems"
Then recreate with:
mkinitcpio -g /boot/kernel26.img
Last edited by colnago (2008-03-01 21:21:37)

ACC log files filling up my computer

I did not turn the power of my computer off during the night, and when I started using it today, I noticed that there were no space at all left on the hard drive. It had gone from 30GB to 0GB during the night.
I investigated what had happened and found 30GB of "ACC" log files from the last night.
The contents of these log files were million and million of repeated lines of this sequence:
04/22/15 07:07:43:276 | [INFO] | 19783 | ACC | ProductsAppsBL | handleTriggerNotification | | ProductsAppsBL | 8412 | Received Trigger Notification from Server
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | BLDataHandlerCommand | | ProductsAppsBL | 8412 | apps panel busy. pushing product Notification back to queue
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | handleTriggerNotification | | ProductsAppsBL | 8412 | Received Trigger Notification from Server
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | BLDataHandlerCommand | | ProductsAppsBL | 8412 | apps panel busy. pushing product Notification back to queue
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | handleTriggerNotification | | ProductsAppsBL | 8412 | Received Trigger Notification from Server
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | BLDataHandlerCommand | | ProductsAppsBL | 8412 | apps panel busy. pushing product Notification back to queue
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | handleTriggerNotification | | ProductsAppsBL | 8412 | Received Trigger Notification from Server
04/22/15 07:07:43:277 | [INFO] | 19783 | ACC | ProductsAppsBL | BLDataHandlerCommand | | ProductsAppsBL | 8412 | apps panel busy. pushing product Notification back to queue
I uninstalled the Creative Cloud updater, and the issue disappeared.
This must be a bug in the updater which should be resolved by Adobe?

Same here - Seems like it - I count 8 log entries per milisecond:
04/22/15 12:31:41:934|[INFO]|90220|ADCS|ProductsAppsBL|BLDataHandlerCommand||ProductsAppsBL|14116| appspanelbusy.pushingproductNotificationbacktoqueue
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|handleTriggerNotification||ProductsAppsBL|1 4116|ReceivedTriggerNotificationfromServer
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|BLDataHandlerCommand||ProductsAppsBL|14116| appspanelbusy.pushingproductNotificationbacktoqueue
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|handleTriggerNotification||ProductsAppsBL|1 4116|ReceivedTriggerNotificationfromServer
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|BLDataHandlerCommand||ProductsAppsBL|14116| appspanelbusy.pushingproductNotificationbacktoqueue
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|handleTriggerNotification||ProductsAppsBL|1 4116|ReceivedTriggerNotificationfromServer
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|BLDataHandlerCommand||ProductsAppsBL|14116| appspanelbusy.pushingproductNotificationbacktoqueue
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|handleTriggerNotification||ProductsAppsBL|1 4116|ReceivedTriggerNotificationfromServer
04/22/15 12:31:41:935|[INFO]|90220|ADCS|ProductsAppsBL|BLDataHandlerCommand||ProductsAppsBL|14116| appspanelbusy.pushingproductNotificationbacktoqueue
04/22/15 12:31:41:936|[INFO]|90220|ADCS|ProductsAppsBL|handleTriggerNotification||ProductsAppsBL|1 4116|ReceivedTriggerNotificationfromServer
And it could have something with the facialdetection of Lightroom CC - I started scanning for faces before going to bed - And at 5 in the morning my SSD got filled (approx 35GB of this)

System.log files filling up in 10.6?

Something is filling up my system log files, to the point that console.app will only show the last half hour of each file. It looks like something is trying to escape its sandbox, but I'm not exactly sure what... I'm getting MANY repeated messages that look like:
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny file-read-data /private/var/log/asl/StoreData
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name
Feb 3 00:29:59: --- last message repeated 1 time ---
Feb 3 00:29:57 Brians-mini sandboxd[16]: * process 16 exceeded 500 log message per second limit - remaining messages this second discarded *
Feb 3 00:29:57 Brians-mini sandboxd[16]: syslogd(15) deny mach-task-name
has anyone seen this? (And does this belong in a different forum?)

It sounds like someone may be trying to connect to your computer. When things are repeatedly denied, especially task-opening commands, it is usually suspected that something is trying to get in. This may be malicious, or may not be, depending on how you connect to the Internet. If you share a connection at home or even between residencies (check with your ISP if you're not sure), it can be normal. See if it still happens after you physically disconnect the network. Also, make sure to disconnect peripherals just to make sure they aren't causing any of the issues.

Huge system.log file filled with over a million messages about NSATSTypeset

Hi,
I just happened to notice the system.log file on my MacBook Pro laptop was absolutely huge - over 1.2 GBytes in just one day. Almost all of it is messages like this:
Mar 31 12:26:23 macbook quicklookd[228]: <NSATSTypesetter: 0x146b40>: Exception * table 0x1473caa0 has block 0x147b3040 rather than 0x147b4850 at index 7573 raised during typesetting layout manager <NSLayoutManager: 0x124140>\n 1 containers, text backing has 16461 characters\n selected character range {16461, 0} affinity: downstream granularity: character\n marked character range {16461, 0}\n Currentl
y holding 16461 glyphs.\n Glyph tree contents: 16461 characters, 16461 glyphs, 4 nodes, 128 node bytes, 16384 storage bytes, 16512 total bytes, 1.00 bytes per character, 1.00 bytes per glyph\n Layout tree contents: 16461 characters, 16461 glyphs, 7573 laid glyphs, 207 laid line fragments, 3 nodes, 96 node bytes, 13656 storage bytes, 13752 total bytes, 0.84 bytes per character, 0.84 bytes per glyph, 36.58 laid glyphs per laid line fragment, 66.43 bytes per laid line fragment\n, glyph range {7573 0}. Ignoring...
and there are over 1.3 million of these messages!!!! There is a tiny bit of variation in some of the numbers (but not all). That is just a little bit more than the total number of files I have on the hard drive in the laptop, so it would appear that the quicklookd is doing something to each and every file on the computer. Any idea why all of a sudden these messages appear and why so many. I only have about 7 versions of the system.log files and none of them are even close to this big, but the one one thing I did do today that I have not in a few weeks is reboot my laptop because of another problem with the laptop screen not waking this morning from being put to sleep last night (was just black but computer was running and could login to it from another computer in the LAN it is attached).
Any ideas why this is happening, or is this something that always happens on a reboot/boot rather than waking from sleep. Why would the quicklookd be printing out so many of these messages that are almost exactly alike???
I have only had this MacBook for a few weeks, so don't have a good feel for what is normal and what isn't yet.
THanks...
-Bob

Bob,
Thanks for your further thoughts and the additional information. My guess is that Quick Look does its file processing independently of whether or not or how recently the computer has been rebooted. The NSATSTypesetter messages filling up the log file are almost certainly error messages and should not occur with normal operation of Quick Look. I suspect that your reboot doesn't directly have anything to do with this problem. (It might have indirectly contributed in the sense that either whatever caused the need for the reboot or the reboot process itself corrupted a file, which in turn caused Quick Look to fail and generate all those error messages in the log file.)
In the meantime I may have a solution for this problem. This morning I rebooted in single user mode and ran AppleJack in manual mode so that I could tell it to clean up all user cache files. (I'd previously downloaded AppleJack application from http://applejack.sourceforge.net/ . To boot in single user mode hold command and s keys at startup chime. ... Run the five AppleJack maintenance tasks in order. The third task will give you the option to enter numbers of users whose cache files will be cleaned. Do this cache cleaning for all users.) In the six hours since I ran AppleJack I've seen exactly two NSATSTypesetter error messages in /var/log/system.log . This compares with hundreds of thousands in the same period yesterday. I just set an iCal alarm to remind me to report back to this discussion thread in two weeks on this issue.
Best,
Chris.
PS: Above you mention 7 log files. Are the older ones of the form system.log.0.bz2 ? If so they have been compressed. Just because they are small doesn't necessarily mean there are not a lot of nearly identical error messages. Uncompress to check. I haven't tried this because large files are very inconvenient to work with on my old iBook.

Log file consumed all drive space; will not commit after adding space

SQL 2008 - Have a drive that is 250GB that holds both the database and log files for a given database; nothing else is on the drive. The database file is ~2GB in size and the log file is ~248GB, filling up the entire drive. I have had
issues in the past where there was not enough free space for the data in the log files to commit to the database file. Since this is a virtual machine I increased the drive to 550GB to give it enough overhead to commit data, and restarted SQL.
The log file data still did not commit. I took a full backup and also tried to shrink the database. Now the database file is ~1GB and the log has grown to ~286GB. Please advise and note I am a systems administrator and not a DBA by trade.

Hi,
I am quite sure your database recovery model is full and you have not taken Transaction log backup, Have you ?
I also doubt you have enough space to take log backup. If you can please take log backup, may be twice to truncate logs and then shrink log file. Only transaction log backup truncates the log ( almost every time unless some long running transaction
is holding the log) and makes it reusable so that either it can be shrinked or reused.
If it is UAT you can change recovery model of database to simple and then shrink the logs. After that change recovery model to full and take full backup of database.
PS: Schedule regular log backup for your databases in full recovery model
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

SBS 2011 Exchange 2010 Server Error in '/owa' Application

I have some configuration issues somewhere and haven't been able to track down the culprit. I get the
Server Error in '/owa' Application
runtime error after I log into the remote website and click on email. Activesync is working fine, email though a client works fine. If I just go straight to remote.landisoffice.com/owa I am prompted for credentials, when I enter them, I get a webpage cannot
be found error in IE. I get the same result when I try to browse from the exchange server. are there iis logs that might help me track down the cause? I've found several threads on this error, but none seem to be the same issue. I am running rollup 7 for sp3
already.
I've also noticed that if I go to http://remote.landisoffice.com/owa I get the page not found, but if I go to https://remote.landisoffice.com/owa I get the above mentioned error page.

Hi Rodge,
Please use
SBS BPA and Exchange BPA, then check if find some relevant issues.
Meanwhile, please run
Test-OwaConnectivity |FL command in the EMS. Any find?
Please also navigate to:
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET File and check if find owa directory. If find, please change it to owa.old, then restart IIS and monitor the result.
à
Server Error in '/owa' Application
By the way, would you please let me know the complete error message that you can get. Or provide a screenshot
of it (please hide all proteted or private information).
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

System Log file filled with arp message from teamed nics

Hello,
We are running a Win2k3 server with dual nics teamed to one IP address. All of our Mac's system logs are being filled with the following message:
Mar 28 12:48:58 Son-of-Spacedog kernel[0]: arp: 192.168.200.50 moved from 00:04:23:b9:00:4a to 00:04:23:b9:00:4b on en0
This is repeated over and over. Is there any way to get the Mac's to stop generating this message? Is the fix for this on the server side or on the Mac side? From what I have seen online in other forums, this started happening with Panther.

There are actually several different types of NIC Teaming Modes:
Adapter Fault Tolerance (AFT) - provides automatic redundancy for a server's network connection. If the primary adapter fails, the secondary adapter takes over. Adapter Fault Tolerance supports two to eight adapters per team. This teaming mode works with any hub or switch, and all team members must be connected to the same device.
Switch Fault Tolerance (SFT) - provides a failover relationship between two adapters when each adapter is connected to a separate switch. Switch Fault Tolerance supports two adapters per team. This feature works with any switch. Spanning Tree Protocol (STP) must be enabled when you create a team in SFT mode.
Adaptive Load Balancing (ALB) - provides load balancing for transmission traffic and adapter fault tolerance. You can also enable or disable receive load balancing (RLB) in ALB teams. This teaming mode works with any switch.
Fast EtherChannel/Link Aggregation - provides increased transmission and reception throughput in a team of two to eight adapters. This mode also includes adapter fault tolerance and load balancing (only routed protocols). This requires a switch with Link Aggregation or FEC capability.
Gigabit EtherChannel/Link Aggregation - is the gigabit extension of the FEC/Link Aggregation/802.3ad: static mode. All team members must operate at gigabit speed.
IEEE 802.3ad: dynamic mode - creates one or more teams using dynamic Link Aggregation with same-speed or mixed-speed adapters. Like the static Link Aggregation modes, Dynamic 802.3ad teams increase transmission and reception throughput and provide fault tolerance. This mode requires a switch that fully supports the IEEE 802.3ad standard.
Now, most likely, somewhere on the network a server is configured for ALB or AFT, and these are the most common methods of NIC teaming (Sadly, the XServes do not). They also do not require any certain type of switch, but they do require STP (Spanning Tree Protocol) to be turned off to function most effectively, or you will see errors on the network like the ones you are seeing in your log. Most managed switches come with STP turned on by default, so you will need to check ALL switches (as the errors will cascade throughout the network) to see if it STP is turned on. Most people do not use STP any more (it basically allows ports on one switch to appear as on another switch), so see if you can turn it off. That should stop the error messages.
-MacBoy in SLC
PowerMac G5 Dual 2.0 GHz Mac OS X (10.4.6)

Exchange 2010 SP3, RU5 - Massive Transaction Log File Generation

Hey All,
I am trying to figure out why 1 of our databases is generating 30k Log Files a day! The other one is generating 20K log files a day. The database does not grow in size as the log files are generated, the problem is log file generation.
I've tried running through some of the various solutions out there, reviewed message tracking logs, rpc client access logs, IIS Logs - all of which show important info, but none of which actually provide the answers.
I Stopped the following services to see if that would affect the log file generation in any way, and it has not!
MS Exchange Transport
Mail Submission
IIS (Site Stopped in IIS)
Mailbox Assistants
Content Indexing Service
With the above services stopped, I still see dozens (or more) log files generated in under 10 minutes, I also checked mailbox size reports (top 10) and found that several users mailboxes were generating item count increases for one user of
about 300, size increases for one user of about 150Mb (over the whole day).
I am not sure what else to check here? Any ideas?
Thanks,
Robert
Robert

Hmm - this sounds like an device is chewing up the logs.
If you use log parser studio, are there any stand out devices in terms of the # of hits?
And for the ExMon was that logged over a period of time? The default 60 second window normally misses a lof of stuff. Just curious!
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
Rhoerick,
Thanks for the response. When checking the logs the highest number of hits were the (Source) Load Balancers, Port 25 VIP. The problem i was experience was the following:
1) I kept expecting the log file generation to drop to an acceptable rate of 10~20 MB Per Minute (Max). We have a large environment and use the exchange sevrers as the mail relays for the hated Nagios monitoring environment
2) We didn't have our enterprise monitoring system watching SMTP traffic, this is being resolved.
3) I needed to look closer at the SMTP transport database counters, logs, log files and focus less on the database log generation, i did do some of that but not enough of that.
4) My troubleshooting kept getting thrown off due to the monitoring notifications seeming to be sent out in batches (or something similar) stopping the transport service for 10 ~ 15 minutes several times seemed to finally "stop the transactions logs
from growing at a psychotic rate".
5) I am re-running my data captures now that i have told the "Nagios Team" to quit killing the exchange servers, with their notifications, sometimes as much as 100+ of the same notifications for the same servers, issues. so far at a quick glance
the log file generation seems to have dropped by about 30%.
Question: What would be the best counters to review in order to "Put it all together"? Also note: our Server roles are split, MBX and CAS/HT.
Robert
Robert

URGENT: SBS 2011 Exchange log files filling up drive in minutes!

Similar Messages

Maybe you are looking for