Strange Exch 5.5 App Log after IMS and IS stoped.

[blubomber]

Here is the configuration of the Exchange 5.5 server.

Windows 2000 Srvr SP3
Exchange 5.5 SP4
Pentium III 500 MHz
384 MB RAM
17GB Hard Drive
Compaq Prosignia Server

This has happened about 3 times in the last 2 months. i get a call that some users cant access their email using outlook 2000. when checking the exchange services, IS and IMS are stopped. In all cases i have been able to restart the services. But, i checking the Applications Log before and after the restart, the log is blank but it says there are (example) -2365478 events. in order to get the log to start recording again, i have to clear it. The systems log does not contain any information regarding why IMS or IS stopped.

I am not sure if i have tried saving the App. log before clearing it. So if it does happen again i am going to have to try that.

Has anyone seen or heard of this situation before? Any info would be greatly appreciated.

[rpertusio]

Is the EventLog service running correctly?

Have you manually cleared the logs? (right-click the app log -> properties -> Clear)

Have you increased the log file size? (Right-click the app log -> properties -> size)

Have you deleted the app log file? (set EventLog service to disabled, reboot, search/delete the *.evt files on the server, re-enable the service, reboot, and new files will be generated)

Have you tried looking at the event logs from a remote computer? (In Event Viewer, right click 'Event Viewer (local)' and choose 'Connect to another computer...')

Lastly, I don't know if anything in 2000 SP4 fixes any of these issues, but it might be something to try 'if all else fails'.


As for the users not able to access their mail... you could turn on diagnostics logging (on the fly) to see if that gives you more information.

Here's some info: Enabling Diagnostics Logging

Just note, you'll be filling up the event logs with information (we're talkin thousands of events an hour if you would enable ALL diagnostics at Maximum logging.)

- rp