How to determine the start time and end time of a single transaction log file in Exchange?

xiaoding133 40 Reputation points
2023-06-09T03:28:00.76+00:00

How to determine the start time and end time of a single transaction log file in Exchange?

The output of eseutil /ml E0400000044.log has creation time. This field can be assigned. Is the j task the start time of the transaction? If yes, how to get the end time?

User's image

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,239 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,573 questions
Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
510 questions
0 comments
Accepted answer
  1. Aholic Liang-MSFT 13,841 Reputation points Microsoft Vendor
    2023-06-14T08:24:35.2966667+00:00

    Hi @ xiaoding133 ,

    In the past two days, I have done some more in-depth research on the transaction log.

    I learned that as soon as a transaction is created in memory, it is written from memory to the log file (E00.log) in use. When this E00.log file is filled with transactions, it is saved to disk with another name, and that name is numbered sequentially by the most recent log file, such as E0000000734.log.

    Therefore, the creation time displayed in the properties page is the time the transaction log was saved as a log file (E0000000734.log).

     

    In addition, when one log file is full, it is automatically written to the next log. So you can use eseutil  to get the creation time of the next file, which is the end time of the previous file.

    (Kindly note:To avoid corrupting the database, do not modify any log files directly.)

    For more information about transaction logs, you can refer to this link: Eseutil - Part 1: Database Technologies (techgenix.com)

    (Note: Microsoft provides third-party contact information to help you find additional information about this topic. This contact information may change without notice. Microsoft does not guarantee the accuracy of third-party contact information.)

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Aholic Liang-MSFT 13,841 Reputation points Microsoft Vendor
    2023-06-12T07:43:36.5933333+00:00

    Hi @ xiaoding133 ,

    Yes, the creation time in the screenshot is the start time of this transaction log file.

    To determine the end time of the transaction log, you can refer to the following command to output the last write time of this log:

    Get-ChildItem -Path "C:\Program Files\Microsoft\Exchange Server\V15\Mailbox\Mailbox Database \E00000001A0.log" | Select-Object Name, LastWriteTime

    Or you can also go in from this path to find the desired log, right-click and select Properties to see when it was created and when it was last modified.

    Normally, for a full transaction log, the last modified time is the end time.

    2023-6-12-1

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.