Contents
From the SharePoint Management Shell, change the drive to which the server writes logs. To enable event log flooding protection, at the PowerShell command prompt, type the following command: For more information, see Set-SPDiagnosticConfig, Set-SPLogLevel and Get-SPLogLevel.
By default, the amount of disk space that diagnostic logging can use is unlimited. Therefore, restrict the disk space that logging uses, especially if you configure logging to write verbose-level events. When the disk reaches the restriction, SharePoint Server removes the oldest logs before it records new logging data.
When to use verbose level logging in SharePoint?
Verbose-level logging can quickly use drive space and affect drive and server performance. You can use verbose-level logging to record more detail when you are making critical changes and then reconfigure logging to record only higher-level events after you make the change. Regularly back up logs.
When to delete log files in SharePoint Server?
When you restrict log drive space usage, or if you keep logs for only a few days, SharePoint Server automatically deletes log files, starting with the oldest files first, when the threshold is met. Enable event log flooding protection.
APPLIES TO: 2013 2016 2019 SharePoint in Microsoft 365 You can troubleshoot problems in the farm by using data from the Unified Logging Service (ULS) logs in SharePoint Server . The ULS logs can collect data at varying levels depending on the logging settings.
Search is performed over all columns and rows. To clear the search, click X. To filter data on only one criterion, type the following in the Search box: : . For example, to search for all log entries raised by SharePoint Foundation 2013, type the following: Area:SharePoint Foundation.
How does the logging work in SharePoint farm?
Another change Microsoft introduced is a new database that contains all logging information for all servers in the farm. This is done through the use of a few new timer jobs. After these jobs are enabled (they are all disabled by default), SharePoint inserts diagnostic logging data into a new Microsoft SQL Server database.