Wednesday, September 30, 2009

Managing and Setting Exchange 2007 Diagnostic Logging Levels

For what ever reason you may have at some point in the life of your server you will need to increase the default logging level.
To start with, if you have come from Exchange 2003 you may be in for a bit of a surprise in that this is not set any where in the GUI. Those of you who have been using Exchange 2007 for a while will probably not be overly surprised by this :)
OK to start with lets have a look at what areas we can change the logging levels and what they are set to initially.
To do this open the EMS and type
Get-EveventLogLevel
Which will produce the following output
Identity                                                             EventLevel
--------                                                             ----------
MSExchange ActiveSync\Requests                                       Lowest   
MSExchange ActiveSync\Configuration                                  Lowest   
MSExchange Antispam\General                                          Lowest   
MSExchange Assistants\Assistants                                     Lowest   
MSExchange Autodiscover\Core                                         Lowest   
MSExchange Autodiscover\Web                                          Lowest   
MSExchange Autodiscover\Provider                                     Lowest   
MSExchange Availability\Availability Service                         Lowest   
MSExchange Availability\Availability Service General                 Lowest   
MSExchange Availability\Availability Service Authentication          Lowest   
MSExchange Availability\Availability Service Authorization           Lowest   
MSExchange Cluster\Move                                              Lowest   
MSExchange Cluster\Upgrade                                           Lowest   
MSExchange Cluster\Action                                            Lowest   
MSExchange Common\General                                            Lowest   
MSExchange Common\Configuration                                      Lowest   
MSExchange Common\Logging                                            Lowest   
MSExchange Extensibility\Transport Address Book                      Lowest   
MSExchange Extensibility\MExRuntime                                  Lowest   
MSExchange EdgeSync\Synchronization                                  Lowest   
MSExchange EdgeSync\Topology                                         Lowest   
MSExchange EdgeSync\SyncNow                                          Lowest   
MSExchange TransportService\TransportService                         Lowest   
MSExchange Web Services\Core                                         Lowest   
MSExchange IMAP4\General                                             Lowest   
MSExchange Messaging Policies\Journaling                             Lowest   
MSExchange Messaging Policies\AttachFilter                           Lowest   
MSExchange Messaging Policies\AddressRewrite                         Lowest   
MSExchange Messaging Policies\Rules                                  Lowest   
MSExchange Messaging Policies\Prelicensing                           Lowest   
MSExchange Anti-spam Update\HygieneUpdate                            Lowest   
MSExchange Management Application\Shell                              Lowest   
MSExchange Management Application\Console                            Lowest   
MSExchange OWA\FormsRegistry                                         Lowest   
MSExchange OWA\Core                                                  Lowest   
MSExchange OWA\Configuration                                         Lowest   
MSExchange OWA\Themes                                                Lowest   
MSExchange OWA\SmallIcons                                            Lowest   
MSExchange OWA\Proxy                                                 Lowest   
MSExchange OWA\Transcoding                                           Lowest   
MSExchange OWA\ADNotifications                                       Lowest   
MSExchange POP3\General                                              Lowest   
MSExchange Process Manager\ProcessManager                            Lowest   
MSExchange Repl\Service                                              Lowest   
MSExchange Repl\Exchange VSS Writer                                  Lowest   
MSExchange Search Indexer\General                                    Lowest   
MSExchange Search Indexer\Configuration                              Lowest   
MSExchange Store Driver\General                                      Lowest   
MSExchange System Attendant Mailbox\General                          Lowest   
MSExchange Topology\Topology Discovery                               Lowest   
MSExchange ADAccess\General                                          Lowest   
MSExchange ADAccess\Cache                                            Lowest   
MSExchange ADAccess\Topology                                         Low      
MSExchange ADAccess\Configuration                                    Lowest   
MSExchange ADAccess\LDAP                                             Lowest   
MSExchange ADAccess\Validation                                       Low      
MSExchange ADAccess\Recipient Update Service                         Lowest   
MSExchange ADAccess\Site Update                                      Lowest   
MSExchangeAL\Ldap Operations                                         Lowest   
MSExchangeAL\Service Control                                         Lowest   
MSExchangeAL\Attribute Mapping                                       Lowest   
MSExchangeAL\Account Management                                      Lowest   
MSExchangeAL\Address List Synchronization                            Lowest   
MSExchangeIS\9000 Private\Transport General                          Lowest   
MSExchangeIS\9000 Private\General                                    Lowest   
MSExchangeIS\9000 Private\Transport Sending                          Lowest   
MSExchangeIS\9000 Private\Transport Delivering                       Lowest   
MSExchangeIS\9000 Private\Transfer Into Gateway                      Lowest   
MSExchangeIS\9000 Private\Transfer Out Of Gateway                    Lowest   
MSExchangeIS\9000 Private\MTA Connections                            Lowest   
MSExchangeIS\9000 Private\Logons                                     Lowest   
MSExchangeIS\9000 Private\Access Control                             Lowest   
MSExchangeIS\9000 Private\Send On Behalf Of                          Lowest   
MSExchangeIS\9000 Private\Send As                                    Lowest   
MSExchangeIS\9000 Private\Rules                                      Lowest   
MSExchangeIS\9000 Private\Storage Limits                             Lowest   
MSExchangeIS\9000 Private\Background Cleanup                         Lowest   
MSExchangeIS\9000 Private\DS Synchronization                         Lowest   
MSExchangeIS\9000 Private\Views                                      Lowest   
MSExchangeIS\9000 Private\Download                                   Lowest   
MSExchangeIS\9000 Private\Local Replication                          Lowest   
MSExchangeIS\9000 Private\Folder Access                              Lowest   
MSExchangeIS\9000 Private\Message Access                             Lowest   
MSExchangeIS\9000 Private\Extended Send As                           Lowest   
MSExchangeIS\9000 Private\Extended Send On Behalf Of                 Lowest   
MSExchangeIS\9001 Public\Transport General                           Lowest   
MSExchangeIS\9001 Public\General                                     Lowest   
MSExchangeIS\9001 Public\Replication DS Updates                      Lowest   
MSExchangeIS\9001 Public\Replication Incoming Messages               Lowest   
MSExchangeIS\9001 Public\Replication Outgoing Messages               Lowest   
MSExchangeIS\9001 Public\Replication NDRs                            Lowest   
MSExchangeIS\9001 Public\Transport Sending                           Lowest   
MSExchangeIS\9001 Public\Transport Delivering                        Lowest   
MSExchangeIS\9001 Public\MTA Connections                             Lowest   
MSExchangeIS\9001 Public\Logons                                      Lowest   
MSExchangeIS\9001 Public\Access Control                              Lowest   
MSExchangeIS\9001 Public\Send On Behalf Of                           Lowest   
MSExchangeIS\9001 Public\Send As                                     Lowest   
MSExchangeIS\9001 Public\Rules                                       Lowest   
MSExchangeIS\9001 Public\Storage Limits                              Lowest   
MSExchangeIS\9001 Public\Replication Site Folders                    Lowest   
MSExchangeIS\9001 Public\Replication Expiry                          Lowest   
MSExchangeIS\9001 Public\Replication Conflicts                       Lowest   
MSExchangeIS\9001 Public\Replication Backfill                        Lowest   
MSExchangeIS\9001 Public\Background Cleanup                          Lowest   
MSExchangeIS\9001 Public\Replication Errors                          Lowest   
MSExchangeIS\9001 Public\DS Synchronization                          Lowest   
MSExchangeIS\9001 Public\Views                                       Lowest   
MSExchangeIS\9001 Public\Replication General                         Lowest   
MSExchangeIS\9001 Public\Download                                    Lowest   
MSExchangeIS\9001 Public\Local Replication                           Lowest   
MSExchangeIS\9002 System\Recovery                                    Lowest   
MSExchangeIS\9002 System\General                                     Lowest   
MSExchangeIS\9002 System\Connections                                 Lowest   
MSExchangeIS\9002 System\Table Cache                                 Lowest   
MSExchangeIS\9002 System\Content Engine                              Lowest   
MSExchangeIS\9002 System\Performance Monitor                         Lowest   
MSExchangeIS\9002 System\Move Mailbox                                Lowest   
MSExchangeIS\9002 System\Download                                    Lowest   
MSExchangeIS\9002 System\Virus Scanning                              Lowest   
MSExchangeIS\9002 System\Exchange Writer                             Lowest   
MSExchangeIS\9002 System\Backup Restore                              Lowest   
MSExchangeIS\9002 System\Client Monitoring                           Lowest   
MSExchangeIS\9002 System\Event History                               Lowest   
MSExchangeIS\9002 System\Database Storage Engine                     Lowest   
MSExchangeMailboxAssistants\Service                                  Lowest   
MSExchangeMailboxAssistants\OOF Assistant                            Lowest   
MSExchangeMailboxAssistants\OOF Library                              Lowest   
MSExchangeMailboxAssistants\Resource Booking Attendant               Lowest   
MSExchangeMailboxAssistants\Email_Lifecycle_Assistant                Lowest   
MSExchangeMailSubmission\General                                     Lowest   
MSExchangeMU\General                                                 Lowest   
MSExchangeSA\Clean Mailbox                                           Lowest   
MSExchangeSA\NSPI Proxy                                              Lowest   
MSExchangeSA\RFR Interface                                           Lowest   
MSExchangeSA\OAL Generator                                           Lowest   
MSExchangeSA\Proxy Generation                                        Lowest   
MSExchangeSA\RPC Calls                                               Lowest   
MSExchangeSA\RPC-HTTP Management                                     Lowest   
MSExchangeTransport\SmtpReceive                                      Lowest   
MSExchangeTransport\SmtpSend                                         Lowest   
MSExchangeTransport\DSN                                              Lowest   
MSExchangeTransport\Routing                                          Lowest   
MSExchangeTransport\Logging                                          Lowest   
MSExchangeTransport\Components                                       Lowest   
MSExchangeTransport\RemoteDelivery                                   Lowest   
MSExchangeTransport\Pickup                                           Lowest   
MSExchangeTransport\Categorizer                                      Lowest   
MSExchangeTransport\PoisonMessage                                    Lowest   
MSExchangeTransport\MessageSecurity                                  Lowest   
MSExchangeTransport\TransportService                                 Lowest   
MSExchangeTransport\Exch50                                           Lowest   
MSExchangeTransport\Process                                          Lowest   
MSExchangeTransport\ResourceManager                                  Lowest   
MSExchangeTransport\Configuration                                    Lowest   
MSExchangeTransport\Storage                                          Lowest   
MSExchangeTransport\Agents                                           Lowest   
MSExchangeTransport\Transport Address Book                           Lowest   
MSExchangeTransport\Orar                                             Lowest   
MSExchangeFDS\General                                                Lowest   
MSExchangeFDS\FileReplication                                        Lowest

So as you can see we can go into some fairly fine detail as to what exactly we want to increase or decrease.
To change the logging level of say MSExchangeSA\OAL Generation we would type the following into the EWA
Set-EventLogLevel –Identity “MSExchangeSA\OAL Generation” –Level <Lowest,Low,Medium,High,Expert>
If you want to do a bulk change to say of of the Information Store events then here is what you need to type into EMS
Get-EventLogLevel –Identity “MSExchangeIS\*” | Set-EventLogLevel –Level High
We can see the results of tis command below
Identity                                                             EventLevel
--------                                                             ----------
MSExchange ActiveSync\Requests                                       Lowest   
MSExchange ActiveSync\Configuration                                  Lowest   
MSExchange Antispam\General                                          Lowest   
MSExchange Assistants\Assistants                                     Lowest   
MSExchange Autodiscover\Core                                         Lowest   
MSExchange Autodiscover\Web                                          Lowest   
MSExchange Autodiscover\Provider                                     Lowest   
MSExchange Availability\Availability Service                         Lowest   
MSExchange Availability\Availability Service General                 Lowest   
MSExchange Availability\Availability Service Authentication          Lowest   
MSExchange Availability\Availability Service Authorization           Lowest   
MSExchange Cluster\Move                                              Lowest   
MSExchange Cluster\Upgrade                                           Lowest   
MSExchange Cluster\Action                                            Lowest   
MSExchange Common\General                                            Lowest   
MSExchange Common\Configuration                                      Lowest   
MSExchange Common\Logging                                            Lowest   
MSExchange Extensibility\Transport Address Book                      Lowest   
MSExchange Extensibility\MExRuntime                                  Lowest   
MSExchange EdgeSync\Synchronization                                  Lowest   
MSExchange EdgeSync\Topology                                         Lowest   
MSExchange EdgeSync\SyncNow                                          Lowest   
MSExchange TransportService\TransportService                         Lowest   
MSExchange Web Services\Core                                         Lowest   
MSExchange IMAP4\General                                             Lowest   
MSExchange Messaging Policies\Journaling                             Lowest   
MSExchange Messaging Policies\AttachFilter                           Lowest   
MSExchange Messaging Policies\AddressRewrite                         Lowest   
MSExchange Messaging Policies\Rules                                  Lowest   
MSExchange Messaging Policies\Prelicensing                           Lowest   
MSExchange Anti-spam Update\HygieneUpdate                            Lowest   
MSExchange Management Application\Shell                              Lowest   
MSExchange Management Application\Console                            Lowest   
MSExchange OWA\FormsRegistry                                         Lowest   
MSExchange OWA\Core                                                  Lowest   
MSExchange OWA\Configuration                                         Lowest   
MSExchange OWA\Themes                                                Lowest   
MSExchange OWA\SmallIcons                                            Lowest   
MSExchange OWA\Proxy                                                 Lowest   
MSExchange OWA\Transcoding                                           Lowest   
MSExchange OWA\ADNotifications                                       Lowest   
MSExchange POP3\General                                              Lowest   
MSExchange Process Manager\ProcessManager                            Lowest   
MSExchange Repl\Service                                              Lowest   
MSExchange Repl\Exchange VSS Writer                                  Lowest   
MSExchange Search Indexer\General                                    Lowest   
MSExchange Search Indexer\Configuration                              Lowest   
MSExchange Store Driver\General                                      Lowest   
MSExchange System Attendant Mailbox\General                          Lowest   
MSExchange Topology\Topology Discovery                               Lowest   
MSExchange ADAccess\General                                          Lowest   
MSExchange ADAccess\Cache                                            Lowest   
MSExchange ADAccess\Topology                                         Low      
MSExchange ADAccess\Configuration                                    Lowest   
MSExchange ADAccess\LDAP                                             Lowest   
MSExchange ADAccess\Validation                                       Low      
MSExchange ADAccess\Recipient Update Service                         Lowest   
MSExchange ADAccess\Site Update                                      Lowest   
MSExchangeAL\Ldap Operations                                         Lowest   
MSExchangeAL\Service Control                                         Lowest   
MSExchangeAL\Attribute Mapping                                       Lowest   
MSExchangeAL\Account Management                                      Lowest   
MSExchangeAL\Address List Synchronization                            Lowest   
MSExchangeIS\9000 Private\Transport General                          High     
MSExchangeIS\9000 Private\General                                    High     
MSExchangeIS\9000 Private\Transport Sending                          High     
MSExchangeIS\9000 Private\Transport Delivering                       High     
MSExchangeIS\9000 Private\Transfer Into Gateway                      High     
MSExchangeIS\9000 Private\Transfer Out Of Gateway                    High     
MSExchangeIS\9000 Private\MTA Connections                            High     
MSExchangeIS\9000 Private\Logons                                     High     
MSExchangeIS\9000 Private\Access Control                             High     
MSExchangeIS\9000 Private\Send On Behalf Of                          High     
MSExchangeIS\9000 Private\Send As                                    High     
MSExchangeIS\9000 Private\Rules                                      High     
MSExchangeIS\9000 Private\Storage Limits                             High     
MSExchangeIS\9000 Private\Background Cleanup                         High     
MSExchangeIS\9000 Private\DS Synchronization                         High     
MSExchangeIS\9000 Private\Views                                      High     
MSExchangeIS\9000 Private\Download                                   High     
MSExchangeIS\9000 Private\Local Replication                          High     
MSExchangeIS\9000 Private\Folder Access                              High     
MSExchangeIS\9000 Private\Message Access                             High     
MSExchangeIS\9000 Private\Extended Send As                           High     
MSExchangeIS\9000 Private\Extended Send On Behalf Of                 High     
MSExchangeIS\9001 Public\Transport General                           High     
MSExchangeIS\9001 Public\General                                     High     
MSExchangeIS\9001 Public\Replication DS Updates                      High     
MSExchangeIS\9001 Public\Replication Incoming Messages               High     
MSExchangeIS\9001 Public\Replication Outgoing Messages               High     
MSExchangeIS\9001 Public\Replication NDRs                            High     
MSExchangeIS\9001 Public\Transport Sending                           High     
MSExchangeIS\9001 Public\Transport Delivering                        High     
MSExchangeIS\9001 Public\MTA Connections                             High     
MSExchangeIS\9001 Public\Logons                                      High     
MSExchangeIS\9001 Public\Access Control                              High     
MSExchangeIS\9001 Public\Send On Behalf Of                           High     
MSExchangeIS\9001 Public\Send As                                     High     
MSExchangeIS\9001 Public\Rules                                       High     
MSExchangeIS\9001 Public\Storage Limits                              High     
MSExchangeIS\9001 Public\Replication Site Folders                    High     
MSExchangeIS\9001 Public\Replication Expiry                          High     
MSExchangeIS\9001 Public\Replication Conflicts                       High     
MSExchangeIS\9001 Public\Replication Backfill                        High     
MSExchangeIS\9001 Public\Background Cleanup                          High     
MSExchangeIS\9001 Public\Replication Errors                          High     
MSExchangeIS\9001 Public\DS Synchronization                          High     
MSExchangeIS\9001 Public\Views                                       High     
MSExchangeIS\9001 Public\Replication General                         High     
MSExchangeIS\9001 Public\Download                                    High     
MSExchangeIS\9001 Public\Local Replication                           High     
MSExchangeIS\9002 System\Recovery                                    High     
MSExchangeIS\9002 System\General                                     High     
MSExchangeIS\9002 System\Connections                                 High     
MSExchangeIS\9002 System\Table Cache                                 High     
MSExchangeIS\9002 System\Content Engine                              High     
MSExchangeIS\9002 System\Performance Monitor                         High     
MSExchangeIS\9002 System\Move Mailbox                                High     
MSExchangeIS\9002 System\Download                                    High     
MSExchangeIS\9002 System\Virus Scanning                              High     
MSExchangeIS\9002 System\Exchange Writer                             High     
MSExchangeIS\9002 System\Backup Restore                              High     
MSExchangeIS\9002 System\Client Monitoring                           High     
MSExchangeIS\9002 System\Event History                               High     
MSExchangeIS\9002 System\Database Storage Engine                     High     
MSExchangeMailboxAssistants\Service                                  Lowest   
MSExchangeMailboxAssistants\OOF Assistant                            Lowest   
MSExchangeMailboxAssistants\OOF Library                              Lowest   
MSExchangeMailboxAssistants\Resource Booking Attendant               Lowest   
MSExchangeMailboxAssistants\Email_Lifecycle_Assistant                Lowest   
MSExchangeMailSubmission\General                                     Lowest   
MSExchangeMU\General                                                 Lowest   
MSExchangeSA\Clean Mailbox                                           Lowest   
MSExchangeSA\NSPI Proxy                                              Lowest   
MSExchangeSA\RFR Interface                                           Lowest   
MSExchangeSA\OAL Generator                                           Lowest   
MSExchangeSA\Proxy Generation                                        Lowest   
MSExchangeSA\RPC Calls                                               Lowest   
MSExchangeSA\RPC-HTTP Management                                     Lowest   
MSExchangeTransport\SmtpReceive                                      Lowest   
MSExchangeTransport\SmtpSend                                         Lowest   
MSExchangeTransport\DSN                                              Lowest   
MSExchangeTransport\Routing                                          Lowest   
MSExchangeTransport\Logging                                          Lowest   
MSExchangeTransport\Components                                       Lowest   
MSExchangeTransport\RemoteDelivery                                   Lowest   
MSExchangeTransport\Pickup                                           Lowest   
MSExchangeTransport\Categorizer                                      Lowest   
MSExchangeTransport\PoisonMessage                                    Lowest   
MSExchangeTransport\MessageSecurity                                  Lowest   
MSExchangeTransport\TransportService                                 Lowest   
MSExchangeTransport\Exch50                                           Lowest   
MSExchangeTransport\Process                                          Lowest   
MSExchangeTransport\ResourceManager                                  Lowest   
MSExchangeTransport\Configuration                                    Lowest   
MSExchangeTransport\Storage                                          Lowest   
MSExchangeTransport\Agents                                           Lowest   
MSExchangeTransport\Transport Address Book                           Lowest   
MSExchangeTransport\Orar                                             Lowest   
MSExchangeFDS\General                                                Lowest   
MSExchangeFDS\FileReplication                                        Lowest

No comments:

Post a Comment