This issue came up during my maintenance call for one of our customers.  The server running Windows Server 2003 for Small Business Server has a backup solution using Symantec Backup Exec System Recovery with tapes.  The backups were failing due to insufficient disk space.  After performing a resource check on the disk, I found a Symantec Endpoint Protection log file generated by the Apache webserver had ballooned to 62GB.  Research into the issue gave two options.  The second proved to be the long term solution.

Issue: Symantec error log grows in size and uses up disk space resulting in the backup failing.  There is not enough free disk space to create the vss copy

System: Windows Server 2003 for Small Business Server; Symantec Endpoint Protection Small Business Edition; Symantec Backup Exec System Recovery

Error Code: Backup Failed, Insufficient disk space to create VSS copy

Solution:

Resolution 1:

Recreate the error.log

http://www.symantec.com/business/support/index?page=content&id=TECH123167

You will need to watch the log file for growth.

Resolution 2:

1. Stop the Symantec Protection Center Webserver Service to remove the error.log file. When you restart this service, the error.log file is recreated.

2. Edit httpd.conf found in C:\Program Files\Symantec\Symantec Protection Center\apache\conf to disable logging. (this works if you do not need the logs)

  -Disable logging:

      Comment out the logging module -  mod_log_config

      Ex - #LoadModule log_config_module modules/mod_log_config.so

 -Comment out the ErrorLog references

      Ex - #ErrorLog "logs/error.log"

      #

      # LogLevel: Control the number of messages logged to the error_log.

      # Possible values include: debug, info, notice, warn, error, crit,

      # alert, emerg.

      #

      #LogLevel warn

      #<IfModule log_config_module>

        #

        # The following directives define some format nicknames for use with

      # a CustomLog directive (see below).

        #

        #LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

          #LogFormat "%h %l %u %t \"%r\" %>s %b" common

      #    <IfModule logio_module>

      #      # You need to enable mod_logio.c to use %I and %O

       #     LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio

       #   </IfModule>

Support articles for Symantec Apache error logs

Stop/Start service to clear and recreate log

http://www.symantec.com/business/support/index?page=content&id=TECH123167

Enable/Disable logs

http://www.symantec.com/business/support/index?page=content&id=TECH94290

Gravity Systems monitors and maintains computer networks and servers for small businesses.  In our calls, we proactively troubleshoot found issues and determine solutions to keep our customers’ networks online and performing.  For difficult or hard-to-find solutions, we post our tech tips in our blog.

Contact us today if you need help finding a fix for your important computer equipment.

Dawn