Hi, in our one of Exchange databases , Transaction logs getting increased rapidly. I’m not sure which user sending such emails. I checked in Hub transport server for any queues , but no such things. I need find the culprit in that database. i thought we can use Exmon tool , but not sure how to analyses the report using Exmon. Regards Gopi K

When using exmon you're really looking at activity based, do you see one user consuming most of the resources? Fast growing log files can be anything, it can caused by scripts, bugs with mail clients, third party software such as archiving, loops etc. The guidance below is the best and more comprehensive out there. Troubleshooting Exchange 2007 Store Log/Database growth issues http://blogs.technet.com/b/mikelag/archive/2009/07/12/troubleshooting-store-log-database-growth-issues.aspxJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

There are numerous things that can cause this to happen, i.e. people doing mass mailings, an infected machine, process gone wild etc..... Anyway here are a few things to consider and ways to track down the culprit 3rd party integration, i.e. if you are using a CRM system with an outlook plugin it can cause issues. I know there was an issue with MS CRM Dynamics that caused this in the past Devices gone wild like BES servers but more recently there has been a rash of incidents regarding iPhones etc. http://msexchangeteam.com/archive/2010/06/30/455342.aspx If you want to see if the problem is coming from an internal Device/Machine you can use one of the following MS USER MONITOR: http://www.microsoft.com/downloads/en/details.aspx?FamilyId=9A49C22E-E0C7-4B7C-ACEF-729D48AF7BC9&displaylang=en and here is a link on how to use it http://www.msexchange.org/tutorials/Microsoft-Exchange-Server-User-Monitor.html And of course this is a great article as well that helps you track down details http://blogs.msdn.com/b/scottos/archive/2007/07/12/rough-and-tough-guide-to-identifying-patterns-in-ese-transaction-log-files.aspx Troy Werelius www.Lucid8.com