For what ever reason you may have at some point in the life of your server you will need to increase the default logging level.
To start with, if you have come from Exchange 2003 you may be in for a bit of a surprise in that this is not set any where in the GUI. Those of you who have been using Exchange 2007 for a while will probably not be overly surprised by this :)
OK to start with lets have a look at what areas we can change the logging levels and what they are set to initially.
To do this open the EMS and type
Get-EveventLogLevel
Which will produce the following output
Identity EventLevel
-------- ----------
MSExchange ActiveSync\Requests Lowest
MSExchange ActiveSync\Configuration Lowest
MSExchange Antispam\General Lowest
MSExchange Assistants\Assistants Lowest
MSExchange Autodiscover\Core Lowest
MSExchange Autodiscover\Web Lowest
MSExchange Autodiscover\Provider Lowest
MSExchange Availability\Availability Service Lowest
MSExchange Availability\Availability Service General Lowest
MSExchange Availability\Availability Service Authentication Lowest
MSExchange Availability\Availability Service Authorization Lowest
MSExchange Cluster\Move Lowest
MSExchange Cluster\Upgrade Lowest
MSExchange Cluster\Action Lowest
MSExchange Common\General Lowest
MSExchange Common\Configuration Lowest
MSExchange Common\Logging Lowest
MSExchange Extensibility\Transport Address Book Lowest
MSExchange Extensibility\MExRuntime Lowest
MSExchange EdgeSync\Synchronization Lowest
MSExchange EdgeSync\Topology Lowest
MSExchange EdgeSync\SyncNow Lowest
MSExchange TransportService\TransportService Lowest
MSExchange Web Services\Core Lowest
MSExchange IMAP4\General Lowest
MSExchange Messaging Policies\Journaling Lowest
MSExchange Messaging Policies\AttachFilter Lowest
MSExchange Messaging Policies\AddressRewrite Lowest
MSExchange Messaging Policies\Rules Lowest
MSExchange Messaging Policies\Prelicensing Lowest
MSExchange Anti-spam Update\HygieneUpdate Lowest
MSExchange Management Application\Shell Lowest
MSExchange Management Application\Console Lowest
MSExchange OWA\FormsRegistry Lowest
MSExchange OWA\Core Lowest
MSExchange OWA\Configuration Lowest
MSExchange OWA\Themes Lowest
MSExchange OWA\SmallIcons Lowest
MSExchange OWA\Proxy Lowest
MSExchange OWA\Transcoding Lowest
MSExchange OWA\ADNotifications Lowest
MSExchange POP3\General Lowest
MSExchange Process Manager\ProcessManager Lowest
MSExchange Repl\Service Lowest
MSExchange Repl\Exchange VSS Writer Lowest
MSExchange Search Indexer\General Lowest
MSExchange Search Indexer\Configuration Lowest
MSExchange Store Driver\General Lowest
MSExchange System Attendant Mailbox\General Lowest
MSExchange Topology\Topology Discovery Lowest
MSExchange ADAccess\General Lowest
MSExchange ADAccess\Cache Lowest
MSExchange ADAccess\Topology Low
MSExchange ADAccess\Configuration Lowest
MSExchange ADAccess\LDAP Lowest
MSExchange ADAccess\Validation Low
MSExchange ADAccess\Recipient Update Service Lowest
MSExchange ADAccess\Site Update Lowest
MSExchangeAL\Ldap Operations Lowest
MSExchangeAL\Service Control Lowest
MSExchangeAL\Attribute Mapping Lowest
MSExchangeAL\Account Management Lowest
MSExchangeAL\Address List Synchronization Lowest
MSExchangeIS\9000 Private\Transport General Lowest
MSExchangeIS\9000 Private\General Lowest
MSExchangeIS\9000 Private\Transport Sending Lowest
MSExchangeIS\9000 Private\Transport Delivering Lowest
MSExchangeIS\9000 Private\Transfer Into Gateway Lowest
MSExchangeIS\9000 Private\Transfer Out Of Gateway Lowest
MSExchangeIS\9000 Private\MTA Connections Lowest
MSExchangeIS\9000 Private\Logons Lowest
MSExchangeIS\9000 Private\Access Control Lowest
MSExchangeIS\9000 Private\Send On Behalf Of Lowest
MSExchangeIS\9000 Private\Send As Lowest
MSExchangeIS\9000 Private\Rules Lowest
MSExchangeIS\9000 Private\Storage Limits Lowest
MSExchangeIS\9000 Private\Background Cleanup Lowest
MSExchangeIS\9000 Private\DS Synchronization Lowest
MSExchangeIS\9000 Private\Views Lowest
MSExchangeIS\9000 Private\Download Lowest
MSExchangeIS\9000 Private\Local Replication Lowest
MSExchangeIS\9000 Private\Folder Access Lowest
MSExchangeIS\9000 Private\Message Access Lowest
MSExchangeIS\9000 Private\Extended Send As Lowest
MSExchangeIS\9000 Private\Extended Send On Behalf Of Lowest
MSExchangeIS\9001 Public\Transport General Lowest
MSExchangeIS\9001 Public\General Lowest
MSExchangeIS\9001 Public\Replication DS Updates Lowest
MSExchangeIS\9001 Public\Replication Incoming Messages Lowest
MSExchangeIS\9001 Public\Replication Outgoing Messages Lowest
MSExchangeIS\9001 Public\Replication NDRs Lowest
MSExchangeIS\9001 Public\Transport Sending Lowest
MSExchangeIS\9001 Public\Transport Delivering Lowest
MSExchangeIS\9001 Public\MTA Connections Lowest
MSExchangeIS\9001 Public\Logons Lowest
MSExchangeIS\9001 Public\Access Control Lowest
MSExchangeIS\9001 Public\Send On Behalf Of Lowest
MSExchangeIS\9001 Public\Send As Lowest
MSExchangeIS\9001 Public\Rules Lowest
MSExchangeIS\9001 Public\Storage Limits Lowest
MSExchangeIS\9001 Public\Replication Site Folders Lowest
MSExchangeIS\9001 Public\Replication Expiry Lowest
MSExchangeIS\9001 Public\Replication Conflicts Lowest
MSExchangeIS\9001 Public\Replication Backfill Lowest
MSExchangeIS\9001 Public\Background Cleanup Lowest
MSExchangeIS\9001 Public\Replication Errors Lowest
MSExchangeIS\9001 Public\DS Synchronization Lowest
MSExchangeIS\9001 Public\Views Lowest
MSExchangeIS\9001 Public\Replication General Lowest
MSExchangeIS\9001 Public\Download Lowest
MSExchangeIS\9001 Public\Local Replication Lowest
MSExchangeIS\9002 System\Recovery Lowest
MSExchangeIS\9002 System\General Lowest
MSExchangeIS\9002 System\Connections Lowest
MSExchangeIS\9002 System\Table Cache Lowest
MSExchangeIS\9002 System\Content Engine Lowest
MSExchangeIS\9002 System\Performance Monitor Lowest
MSExchangeIS\9002 System\Move Mailbox Lowest
MSExchangeIS\9002 System\Download Lowest
MSExchangeIS\9002 System\Virus Scanning Lowest
MSExchangeIS\9002 System\Exchange Writer Lowest
MSExchangeIS\9002 System\Backup Restore Lowest
MSExchangeIS\9002 System\Client Monitoring Lowest
MSExchangeIS\9002 System\Event History Lowest
MSExchangeIS\9002 System\Database Storage Engine Lowest
MSExchangeMailboxAssistants\Service Lowest
MSExchangeMailboxAssistants\OOF Assistant Lowest
MSExchangeMailboxAssistants\OOF Library Lowest
MSExchangeMailboxAssistants\Resource Booking Attendant Lowest
MSExchangeMailboxAssistants\Email_Lifecycle_Assistant Lowest
MSExchangeMailSubmission\General Lowest
MSExchangeMU\General Lowest
MSExchangeSA\Clean Mailbox Lowest
MSExchangeSA\NSPI Proxy Lowest
MSExchangeSA\RFR Interface Lowest
MSExchangeSA\OAL Generator Lowest
MSExchangeSA\Proxy Generation Lowest
MSExchangeSA\RPC Calls Lowest
MSExchangeSA\RPC-HTTP Management Lowest
MSExchangeTransport\SmtpReceive Lowest
MSExchangeTransport\SmtpSend Lowest
MSExchangeTransport\DSN Lowest
MSExchangeTransport\Routing Lowest
MSExchangeTransport\Logging Lowest
MSExchangeTransport\Components Lowest
MSExchangeTransport\RemoteDelivery Lowest
MSExchangeTransport\Pickup Lowest
MSExchangeTransport\Categorizer Lowest
MSExchangeTransport\PoisonMessage Lowest
MSExchangeTransport\MessageSecurity Lowest
MSExchangeTransport\TransportService Lowest
MSExchangeTransport\Exch50 Lowest
MSExchangeTransport\Process Lowest
MSExchangeTransport\ResourceManager Lowest
MSExchangeTransport\Configuration Lowest
MSExchangeTransport\Storage Lowest
MSExchangeTransport\Agents Lowest
MSExchangeTransport\Transport Address Book Lowest
MSExchangeTransport\Orar Lowest
MSExchangeFDS\General Lowest
MSExchangeFDS\FileReplication Lowest
So as you can see we can go into some fairly fine detail as to what exactly we want to increase or decrease.
To change the logging level of say MSExchangeSA\OAL Generation we would type the following into the EWA
Set-EventLogLevel –Identity “MSExchangeSA\OAL Generation” –Level <Lowest,Low,Medium,High,Expert>
If you want to do a bulk change to say of of the Information Store events then here is what you need to type into EMS
Get-EventLogLevel –Identity “MSExchangeIS\*” | Set-EventLogLevel –Level High
We can see the results of tis command below
Identity EventLevel
-------- ----------
MSExchange ActiveSync\Requests Lowest
MSExchange ActiveSync\Configuration Lowest
MSExchange Antispam\General Lowest
MSExchange Assistants\Assistants Lowest
MSExchange Autodiscover\Core Lowest
MSExchange Autodiscover\Web Lowest
MSExchange Autodiscover\Provider Lowest
MSExchange Availability\Availability Service Lowest
MSExchange Availability\Availability Service General Lowest
MSExchange Availability\Availability Service Authentication Lowest
MSExchange Availability\Availability Service Authorization Lowest
MSExchange Cluster\Move Lowest
MSExchange Cluster\Upgrade Lowest
MSExchange Cluster\Action Lowest
MSExchange Common\General Lowest
MSExchange Common\Configuration Lowest
MSExchange Common\Logging Lowest
MSExchange Extensibility\Transport Address Book Lowest
MSExchange Extensibility\MExRuntime Lowest
MSExchange EdgeSync\Synchronization Lowest
MSExchange EdgeSync\Topology Lowest
MSExchange EdgeSync\SyncNow Lowest
MSExchange TransportService\TransportService Lowest
MSExchange Web Services\Core Lowest
MSExchange IMAP4\General Lowest
MSExchange Messaging Policies\Journaling Lowest
MSExchange Messaging Policies\AttachFilter Lowest
MSExchange Messaging Policies\AddressRewrite Lowest
MSExchange Messaging Policies\Rules Lowest
MSExchange Messaging Policies\Prelicensing Lowest
MSExchange Anti-spam Update\HygieneUpdate Lowest
MSExchange Management Application\Shell Lowest
MSExchange Management Application\Console Lowest
MSExchange OWA\FormsRegistry Lowest
MSExchange OWA\Core Lowest
MSExchange OWA\Configuration Lowest
MSExchange OWA\Themes Lowest
MSExchange OWA\SmallIcons Lowest
MSExchange OWA\Proxy Lowest
MSExchange OWA\Transcoding Lowest
MSExchange OWA\ADNotifications Lowest
MSExchange POP3\General Lowest
MSExchange Process Manager\ProcessManager Lowest
MSExchange Repl\Service Lowest
MSExchange Repl\Exchange VSS Writer Lowest
MSExchange Search Indexer\General Lowest
MSExchange Search Indexer\Configuration Lowest
MSExchange Store Driver\General Lowest
MSExchange System Attendant Mailbox\General Lowest
MSExchange Topology\Topology Discovery Lowest
MSExchange ADAccess\General Lowest
MSExchange ADAccess\Cache Lowest
MSExchange ADAccess\Topology Low
MSExchange ADAccess\Configuration Lowest
MSExchange ADAccess\LDAP Lowest
MSExchange ADAccess\Validation Low
MSExchange ADAccess\Recipient Update Service Lowest
MSExchange ADAccess\Site Update Lowest
MSExchangeAL\Ldap Operations Lowest
MSExchangeAL\Service Control Lowest
MSExchangeAL\Attribute Mapping Lowest
MSExchangeAL\Account Management Lowest
MSExchangeAL\Address List Synchronization Lowest
MSExchangeIS\9000 Private\Transport General High
MSExchangeIS\9000 Private\General High
MSExchangeIS\9000 Private\Transport Sending High
MSExchangeIS\9000 Private\Transport Delivering High
MSExchangeIS\9000 Private\Transfer Into Gateway High
MSExchangeIS\9000 Private\Transfer Out Of Gateway High
MSExchangeIS\9000 Private\MTA Connections High
MSExchangeIS\9000 Private\Logons High
MSExchangeIS\9000 Private\Access Control High
MSExchangeIS\9000 Private\Send On Behalf Of High
MSExchangeIS\9000 Private\Send As High
MSExchangeIS\9000 Private\Rules High
MSExchangeIS\9000 Private\Storage Limits High
MSExchangeIS\9000 Private\Background Cleanup High
MSExchangeIS\9000 Private\DS Synchronization High
MSExchangeIS\9000 Private\Views High
MSExchangeIS\9000 Private\Download High
MSExchangeIS\9000 Private\Local Replication High
MSExchangeIS\9000 Private\Folder Access High
MSExchangeIS\9000 Private\Message Access High
MSExchangeIS\9000 Private\Extended Send As High
MSExchangeIS\9000 Private\Extended Send On Behalf Of High
MSExchangeIS\9001 Public\Transport General High
MSExchangeIS\9001 Public\General High
MSExchangeIS\9001 Public\Replication DS Updates High
MSExchangeIS\9001 Public\Replication Incoming Messages High
MSExchangeIS\9001 Public\Replication Outgoing Messages High
MSExchangeIS\9001 Public\Replication NDRs High
MSExchangeIS\9001 Public\Transport Sending High
MSExchangeIS\9001 Public\Transport Delivering High
MSExchangeIS\9001 Public\MTA Connections High
MSExchangeIS\9001 Public\Logons High
MSExchangeIS\9001 Public\Access Control High
MSExchangeIS\9001 Public\Send On Behalf Of High
MSExchangeIS\9001 Public\Send As High
MSExchangeIS\9001 Public\Rules High
MSExchangeIS\9001 Public\Storage Limits High
MSExchangeIS\9001 Public\Replication Site Folders High
MSExchangeIS\9001 Public\Replication Expiry High
MSExchangeIS\9001 Public\Replication Conflicts High
MSExchangeIS\9001 Public\Replication Backfill High
MSExchangeIS\9001 Public\Background Cleanup High
MSExchangeIS\9001 Public\Replication Errors High
MSExchangeIS\9001 Public\DS Synchronization High
MSExchangeIS\9001 Public\Views High
MSExchangeIS\9001 Public\Replication General High
MSExchangeIS\9001 Public\Download High
MSExchangeIS\9001 Public\Local Replication High
MSExchangeIS\9002 System\Recovery High
MSExchangeIS\9002 System\General High
MSExchangeIS\9002 System\Connections High
MSExchangeIS\9002 System\Table Cache High
MSExchangeIS\9002 System\Content Engine High
MSExchangeIS\9002 System\Performance Monitor High
MSExchangeIS\9002 System\Move Mailbox High
MSExchangeIS\9002 System\Download High
MSExchangeIS\9002 System\Virus Scanning High
MSExchangeIS\9002 System\Exchange Writer High
MSExchangeIS\9002 System\Backup Restore High
MSExchangeIS\9002 System\Client Monitoring High
MSExchangeIS\9002 System\Event History High
MSExchangeIS\9002 System\Database Storage Engine High
MSExchangeMailboxAssistants\Service Lowest
MSExchangeMailboxAssistants\OOF Assistant Lowest
MSExchangeMailboxAssistants\OOF Library Lowest
MSExchangeMailboxAssistants\Resource Booking Attendant Lowest
MSExchangeMailboxAssistants\Email_Lifecycle_Assistant Lowest
MSExchangeMailSubmission\General Lowest
MSExchangeMU\General Lowest
MSExchangeSA\Clean Mailbox Lowest
MSExchangeSA\NSPI Proxy Lowest
MSExchangeSA\RFR Interface Lowest
MSExchangeSA\OAL Generator Lowest
MSExchangeSA\Proxy Generation Lowest
MSExchangeSA\RPC Calls Lowest
MSExchangeSA\RPC-HTTP Management Lowest
MSExchangeTransport\SmtpReceive Lowest
MSExchangeTransport\SmtpSend Lowest
MSExchangeTransport\DSN Lowest
MSExchangeTransport\Routing Lowest
MSExchangeTransport\Logging Lowest
MSExchangeTransport\Components Lowest
MSExchangeTransport\RemoteDelivery Lowest
MSExchangeTransport\Pickup Lowest
MSExchangeTransport\Categorizer Lowest
MSExchangeTransport\PoisonMessage Lowest
MSExchangeTransport\MessageSecurity Lowest
MSExchangeTransport\TransportService Lowest
MSExchangeTransport\Exch50 Lowest
MSExchangeTransport\Process Lowest
MSExchangeTransport\ResourceManager Lowest
MSExchangeTransport\Configuration Lowest
MSExchangeTransport\Storage Lowest
MSExchangeTransport\Agents Lowest
MSExchangeTransport\Transport Address Book Lowest
MSExchangeTransport\Orar Lowest
MSExchangeFDS\General Lowest
MSExchangeFDS\FileReplication Lowest
Wednesday, September 30, 2009
Managing and Setting Exchange 2007 Diagnostic Logging Levels
Labels:
Diagnostics,
Exchange 2007,
Logging,
Powershell,
Troubleshooting
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment