I think its related to WSUS but I barely know enough enough to be considered dangerous. Inetpub>logs>LogFiles>W3SVC137xxxxxxx folder is creating log files that are eating up about 440 MB per day! Found out the logs were eating up about 30% of the space on our main server drive so I zipped all but the logs for this month and freed up over 20 gigs of space. Below is just part of 1 second from today. Anyone know what the heck is causing this to run out of control or how to fix it? 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 7 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 8 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 7 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 8 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 7 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 12 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 8 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 8 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 10 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 3 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 2 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 SB\Administrator xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 200 0 0 7 2010-08-05 13:59:51 xIPx%10 POST /ApiRemoting30/WebService.asmx - 8530 - xIPx%10 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.4200) 401 1 2148074254 1

the iis logs are stored there. a simple "quick and dirty" thing to do set compression attribute for the folder and subfolder/files, it helps alot. which windows version is the server? you can also set in iis manager how much and where to is logged, though how depends on the version used

Windows Server 2008 Server Standard FE SP2 I did poke around IIS Manager. It seemed I could set the maximum size of log file before starting a new file. That would seem to not solve my problem as rather than having 1 file at 440 MB for 1 day I might now have 10 at 44 MB each. I have thought about make the folder compressed. That would help but it still doesn't resolve the problem. The amount of data being written to the file concerns me. Not only is it taking up space but requires Processing Power to create. 440MB seems very extreme IMO.

under logging in iis manager, there is the section "Log File" which contains "Format", there you can either deselect fields to reduce data or, in the right pane you can disable logging. keep in mind however that depending on the application you have hosted and your country, there might be laws that you have to keep logfiles for a certain amount of time

Did a little web searching. Checked a few of my workstations and on 2 change -> Internet Explorer - Tools>Internet Options>Connections>Lan Settings unchecked "Automatically Detect Settings" and todays log file is about 1/40th of the size of yesterdays file at this time of day. I hope it's the long term solution.

If you're using SBS 2008 you could check out this thread: http://social.technet.microsoft.com/Forums/en/smallbusinessserver/thread/d0dac06b-477a-491c-be84-bf1bfd1bbc0e It fixed the problem for me. The issue was SBS Console being left running. Apparently it isn't broken, this is supposed to happen... Here's how to turn off the logging: http://blogs.technet.com/b/sbs/archive/2010/03/02/recovering-disk-space-on-the-c-drive-in-small-business-server-2008.aspx