Luke Cassar
16.09.2009 01:07
Hi,
the diagnostic logging for virus scanning in Kaspersky for Exchange 2007 is set to minimum by default, but after 1 day the log file has reached 1gb+ which then cant be opened easily to examine in the event of a problem anyway.
Is there any work around for this?
For now I have just disabled diagnostic logging totally but I think we should be able to have it set to minimum logging and not experience such large log files.
This is a small Exchange setup with only about 90 mailboxes and a fairly low volume of traffic.
Thanks,
Luke
Richard N
7.10.2009 12:06
I also have this issue and it eventually crashed the server due to lack of disk space. Does anyone have a solution?
Luke Cassar
3.11.2009 01:39
QUOTE(Richard N @ 7.10.2009 20:06)

I also have this issue and it eventually crashed the server due to lack of disk space. Does anyone have a solution?
All we could do was to disable logging to stop all the disk space being wasted. Still no answer about this issue though.
Hello,
Please specify the complete build number of KS for MS Exchange 2007 that you have installed.
Ken Giese
12.11.2009 00:49
We had the same problem. The default logging for Kaspersky Security 6.0 for Microsoft Exchange Server 2007 is to save 5 files each containing one months worth of information. We changed our settings to one day files and save 15. this greatly reduced the size of the logs files so we could actually open them and read the content with out waiting 25+ minutes for a 3+gig text file to open.
Aaron Johnson
18.11.2009 21:03
Same issue here. It's the virus log that's out of control, the common log is under 1Mb for me. Just downloaded and installed last week, already had the server stop processing mail due to a full c: drive, which is only 40 gig but usually only has ~15gig utilized. Storage groups are on another volume. Had a log file > 20 gig in just over a week with minimum logging. Deleted the file, restarted the service and had several Mb of a log file in a couple of seconds. reset logging to none and read the file. It logs every message it scans and the result no matter if it's clean or not. Also gave the results of the background scan i had running file by file regardless of infection.
Is there any way to set it to only record infected/suspicious items? I don't need a record of each clean email and attachment, but would like a record of infections, suspicious, and errors.
Exchange 2007 Standard SP1 (I know, i know... sp2 is out...)
Ver 08.01.0393.001
186 mailboxes
Kaspersky for Exchange 2007 6.0
Ver 6.0.1512.1514
Luke Cassar
18.11.2009 22:25
QUOTE(Aaron Johnson @ 19.11.2009 05:03)

Is there any way to set it to only record infected/suspicious items? I don't need a record of each clean email and attachment, but would like a record of infections, suspicious, and errors.
Windows event log contains all of the infection reports (I think its configured by default).. disable Kaspersky logging and increase the size of your application log on Exchange so you can keep a longer history of events.
You'll be able to see infections without killing the space on your email server.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.