Different Ways to Increase Diagnostics Logging on Exchange 2007 Server






Through Exchange Mangement Shell

To increase diagnostics logging on any component you need to know the 'Event source' and 'event categories' for the component you want to increase logging on.

1. To view all components, run the below command:
[PS] get-eventloglevel
This will show you all the components, its categories and the level they are at.

2. To check Diagnostics logging level on a particular source, say MSExchangeSA, run the following command:

[PS] get-eventloglevel -identity "MSExchangeSA\*"

This will show all categories under MSExchangeSA like shown below:

3. There are 5 levels of logging available in Exchange 2007.

They are:
- Lowest
- Low
- Medium
- High
- Expert.

4. To increase logging for one category of source MSExchangeSA say for 'Proxy Generation' to high, run the command:

[PS] set-eventloglevel -identity "MSExchangeSA\Proxy Generation" -level high

5. If you wan to increase logging for all components for the source MSExchangeSA, run the command:

[PS] set-eventloglevel “MSExchangeSA\*” -level high

6. After troubleshooting, to decrease the logging level, run the command for the default logging level which is Lowest:

[PS] set-eventloglevel “MSExchangeSA\*” -level lowest

Through GUI tool called ExDiagLog

You can also use a GUI created by PSS to increase ro decrease the diagnostics logging. This GUI tool opens up all the components and categories. All you have to do is select and increase using the mouse. It is similar to the Diagnostics Logging tab in Exchange 2003 server.

NOTE: The Exdiaglog cannot be run remotely and has to be run on the exchange server.

This tool is publicly available and can be downloaded fromt he following location:
Exchange 2007 Diagnostic Logging Tool
http://code.msdn.microsoft.com/Exchange2007Diagnost/Release/ProjectReleases.aspx?ReleaseId=311

Through REGISTRY

Let's take the same example as shown in the first method. Increasing for NSPI Proxy in MSExchangeSA.

1. Open Registry Editor
2. Drop down to the following location:
HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeSA\Diagnostics
3. Double click and open NSPI Proxy for which we want to increase the diagnostics logging.
4. Enter decimal value as per the following:
-- 7 for Expert
-- 5 for High
-- 3 for Medium
-- 1 for Low

5. Change it back to 0 for No logging or Lowest once you are done with the logging.