IIS Logs Overwriting Daily

IIS Logs Overwriting Daily

am 05.11.2007 13:18:35 von Christopher W Aiken

We have moved our website to a virtual server running IIS 6.
It doesn't seem to matter whether I select daily, weekly or monthly options
for the schedule, all I get is a single daily file which gets overwritten.
Any thoughts?

Regards
Chris Curtis

Re: IIS Logs Overwriting Daily

am 05.11.2007 16:13:09 von .._..

That isn't the default behavior of IIS6. You are talking about the HTTP
logs, not the event logs right?

What settings are present in your log file properties area? (I can't see
any settings that would delete logs.)

I might look for a scheduled task, or a batch file or something that deletes
them including stuff like "disk cleanup" or "file space recovery" third
party apps.. (Which would be unable to delete the open file.)

Do the file names change on the files at all? Daily ones at least should be
in a "date format" that should tell you when it was created.

What happens if you put an empty file in the same directory called
"test.log"? Does it disappear too?

Also check log analysis software that might be "cleaning up".

"Chris Curtis" wrote in message
news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
> We have moved our website to a virtual server running IIS 6.
> It doesn't seem to matter whether I select daily, weekly or monthly
> options for the schedule, all I get is a single daily file which gets
> overwritten.
> Any thoughts?
>
> Regards
> Chris Curtis
>

Re: IIS Logs Overwriting Daily

am 05.11.2007 16:58:42 von Christopher W Aiken

Thanks for the reply. I've used IIS5 on another server quite happily for a
number of years.
The file names do change on a daily basis and the title format does match
the schedule option.
Just after posting this enquiry I decided to change the logs to hourly
beginning at 13.04.
There is just the one file which is now nearly three hours long!

I'll try some of your other suggestions and report back!

Chris

".._.." <.._..@yourmom.mil> wrote in message
news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
> That isn't the default behavior of IIS6. You are talking about the HTTP
> logs, not the event logs right?
>
> What settings are present in your log file properties area? (I can't see
> any settings that would delete logs.)
>
> I might look for a scheduled task, or a batch file or something that
> deletes them including stuff like "disk cleanup" or "file space recovery"
> third party apps.. (Which would be unable to delete the open file.)
>
> Do the file names change on the files at all? Daily ones at least should
> be in a "date format" that should tell you when it was created.
>
> What happens if you put an empty file in the same directory called
> "test.log"? Does it disappear too?
>
> Also check log analysis software that might be "cleaning up".
>
> "Chris Curtis" wrote in message
> news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>> We have moved our website to a virtual server running IIS 6.
>> It doesn't seem to matter whether I select daily, weekly or monthly
>> options for the schedule, all I get is a single daily file which gets
>> overwritten.
>> Any thoughts?
>>
>> Regards
>> Chris Curtis
>>
>
>

Re: IIS Logs Overwriting Daily

am 05.11.2007 17:01:11 von Christopher W Aiken

I also note that it is truncating the year at the beginning of the line to
007!


".._.." <.._..@yourmom.mil> wrote in message
news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
> That isn't the default behavior of IIS6. You are talking about the HTTP
> logs, not the event logs right?
>
> What settings are present in your log file properties area? (I can't see
> any settings that would delete logs.)
>
> I might look for a scheduled task, or a batch file or something that
> deletes them including stuff like "disk cleanup" or "file space recovery"
> third party apps.. (Which would be unable to delete the open file.)
>
> Do the file names change on the files at all? Daily ones at least should
> be in a "date format" that should tell you when it was created.
>
> What happens if you put an empty file in the same directory called
> "test.log"? Does it disappear too?
>
> Also check log analysis software that might be "cleaning up".
>
> "Chris Curtis" wrote in message
> news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>> We have moved our website to a virtual server running IIS 6.
>> It doesn't seem to matter whether I select daily, weekly or monthly
>> options for the schedule, all I get is a single daily file which gets
>> overwritten.
>> Any thoughts?
>>
>> Regards
>> Chris Curtis
>>
>
>

Re: IIS Logs Overwriting Daily

am 05.11.2007 18:12:44 von Kristofer Gafvert

That is not how IIS names the log file. It will have "07" indicating the
year, not 007.


--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


Chris Curtis wrote:

>I also note that it is truncating the year at the beginning of the line to
>007!
>
>
>".._.." <.._..@yourmom.mil> wrote in message
>news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
>>That isn't the default behavior of IIS6. You are talking about the HTTP
>>logs, not the event logs right?
>>
>>What settings are present in your log file properties area? (I can't see
>>any settings that would delete logs.)
>>
>>I might look for a scheduled task, or a batch file or something that
>>deletes them including stuff like "disk cleanup" or "file space recovery"
>>third party apps.. (Which would be unable to delete the open file.)
>>
>>Do the file names change on the files at all? Daily ones at least should
>>be in a "date format" that should tell you when it was created.
>>
>>What happens if you put an empty file in the same directory called
>>"test.log"? Does it disappear too?
>>
>>Also check log analysis software that might be "cleaning up".
>>
>>"Chris Curtis" wrote in message
>>news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>>>We have moved our website to a virtual server running IIS 6.
>>>It doesn't seem to matter whether I select daily, weekly or monthly
>>>options for the schedule, all I get is a single daily file which gets
>>>overwritten.
>>>Any thoughts?
>>>
>>>Regards
>>>Chris Curtis
>>>
>>
>>

Re: IIS Logs Overwriting Daily

am 05.11.2007 21:03:07 von Christopher W Aiken

I meant each entry - not the file name!

Chris

"Kristofer Gafvert" wrote in message
news:xn0fdcc5wbrs8mj00k@news.microsoft.com...
> That is not how IIS names the log file. It will have "07" indicating the
> year, not 007.
>
>
> --
> Regards,
> Kristofer Gafvert
> http://www.gafvert.info/iis/ - IIS Related Info
>
>
> Chris Curtis wrote:
>
>>I also note that it is truncating the year at the beginning of the line to
>>007!
>>
>>
>>".._.." <.._..@yourmom.mil> wrote in message
>>news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
>>>That isn't the default behavior of IIS6. You are talking about the HTTP
>>>logs, not the event logs right?
>>>
>>>What settings are present in your log file properties area? (I can't see
>>>any settings that would delete logs.)
>>>
>>>I might look for a scheduled task, or a batch file or something that
>>>deletes them including stuff like "disk cleanup" or "file space recovery"
>>>third party apps.. (Which would be unable to delete the open file.)
>>>
>>>Do the file names change on the files at all? Daily ones at least should
>>>be in a "date format" that should tell you when it was created.
>>>
>>>What happens if you put an empty file in the same directory called
>>>"test.log"? Does it disappear too?
>>>
>>>Also check log analysis software that might be "cleaning up".
>>>
>>>"Chris Curtis" wrote in message
>>>news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>>>>We have moved our website to a virtual server running IIS 6.
>>>>It doesn't seem to matter whether I select daily, weekly or monthly
>>>>options for the schedule, all I get is a single daily file which gets
>>>>overwritten.
>>>>Any thoughts?
>>>>
>>>>Regards
>>>>Chris Curtis
>>>>
>>>
>>>

Re: IIS Logs Overwriting Daily

am 05.11.2007 21:10:53 von Kristofer Gafvert

That is not how IIS writes the log files. Do you have some kind of custom
logging?


--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


Chris Curtis wrote:

>I meant each entry - not the file name!
>
>Chris
>
>"Kristofer Gafvert" wrote in message
>news:xn0fdcc5wbrs8mj00k@news.microsoft.com...
>>That is not how IIS names the log file. It will have "07" indicating the
>>year, not 007.
>>
>>
>>-- Regards,
>>Kristofer Gafvert
>>http://www.gafvert.info/iis/ - IIS Related Info
>>
>>
>>Chris Curtis wrote:
>>
>>>I also note that it is truncating the year at the beginning of the line to
>>>007!
>>>
>>>
>>>".._.." <.._..@yourmom.mil> wrote in message
>>>news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
>>>>That isn't the default behavior of IIS6. You are talking about the HTTP
>>>>logs, not the event logs right?
>>>>
>>>>What settings are present in your log file properties area? (I can't see
>>>>any settings that would delete logs.)
>>>>
>>>>I might look for a scheduled task, or a batch file or something that
>>>>deletes them including stuff like "disk cleanup" or "file space recovery"
>>>>third party apps.. (Which would be unable to delete the open file.)
>>>>
>>>>Do the file names change on the files at all? Daily ones at least should
>>>>be in a "date format" that should tell you when it was created.
>>>>
>>>>What happens if you put an empty file in the same directory called
>>>>"test.log"? Does it disappear too?
>>>>
>>>>Also check log analysis software that might be "cleaning up".
>>>>
>>>>"Chris Curtis" wrote in message
>>>>news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>>>>>We have moved our website to a virtual server running IIS 6.
>>>>>It doesn't seem to matter whether I select daily, weekly or monthly
>>>>>options for the schedule, all I get is a single daily file which gets
>>>>>overwritten.
>>>>>Any thoughts?
>>>>>
>>>>>Regards
>>>>>Chris Curtis
>>>>>
>>>>
>>>>

Re: IIS Logs Overwriting Daily

am 06.11.2007 11:41:02 von Christopher W Aiken

Thank you.
You hit the nail on the head regarding a scheduled task

I should have noticed that the time of the first entry, whatever the
schedule set, is always just after 3.00am and I get email notifications that
a Plesk Statistics package successfully ran at 3.00am! Since I can't find
any way of cotrolling how this stats package works I have disabled it in the
Task Scheduler and the hosting company tells me this will solve the problem.

Regards
Chris

".._.." <.._..@yourmom.mil> wrote in message
news:9qGXi.39864$G23.5299@newsreading01.news.tds.net...
> That isn't the default behavior of IIS6. You are talking about the HTTP
> logs, not the event logs right?
>
> What settings are present in your log file properties area? (I can't see
> any settings that would delete logs.)
>
> I might look for a scheduled task, or a batch file or something that
> deletes them including stuff like "disk cleanup" or "file space recovery"
> third party apps.. (Which would be unable to delete the open file.)
>
> Do the file names change on the files at all? Daily ones at least should
> be in a "date format" that should tell you when it was created.
>
> What happens if you put an empty file in the same directory called
> "test.log"? Does it disappear too?
>
> Also check log analysis software that might be "cleaning up".
>
> "Chris Curtis" wrote in message
> news:OVZz$X6HIHA.3940@TK2MSFTNGP05.phx.gbl...
>> We have moved our website to a virtual server running IIS 6.
>> It doesn't seem to matter whether I select daily, weekly or monthly
>> options for the schedule, all I get is a single daily file which gets
>> overwritten.
>> Any thoughts?
>>
>> Regards
>> Chris Curtis
>>
>
>