Home
  •  

The log disk is full.

The_log_disk_is_full (Rule)

Knowledge Base article:

Summary

The log disk is full.

Resolutions

Free up disk space by deleting unneeded files or directories. Do not delete the log files.

If there are only Exchange log files on the drive, move Exchange log files to a safe backup location, starting with the oldest files first. Do not remove log files at or past the current Exchange checkpoint. After freeing disk space, keep a copy of the log files safe on another disk.

If you remove log files needed to mount the database again, errors referencing the missing log files will occur and you can move the necessary files back. Refer to Q240145: How to Tell Which Transaction Log Files Can Be Safely Removed.

Be aware that incremental backup cycles may affected by manually removing transaction log files and your next backup may need to be a full backup.

After verifying that your system has sufficient disk space, remount the database, if necessary.

External

For more information about MSExchangeIS event 9504, see:

Element properties:

TargetMicrosoft.Exchange.ExchangeComponent.IS
CategoryEventCollection
EnabledTrue
Event_ID9504
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
The log disk is full.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="The_log_disk_is_full" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ExchangeComponent.IS" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>9504</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>MatchesWildcard</Operator>

              <Pattern>MSExchangeIS*</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="The_log_disk_is_full.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>