Location of Exchange Logs

  • 7019070
  • 23-Jan-2014
  • 07-Aug-2017


Exchange 2010 (perhaps other versions as well)
Retain 3 and later


Sometimes Exchange will report various http errors to Retain during an archive job (e.g., "401 - Unauthorized" or "503 - Service Unavailable", etc).  In situations like these, it is helpful to look at the Exchange logs at the exact date/time that the error is sent to the Retain Worker to see what was happening on the Exchange side.


Exchange and  EWS through IIS is not supported by GWAVA, anything mentioned in this article is provided as a courtesy.  If you need help with IIS related issues please look up Microsoft knowledge base information or contact Mircrosoft.

The following are the default locations of the Exchange logs found on the applicable Exchange and IIS (EWS) servers:

Exchange logging:   C:\Program Files\Microsoft\Exchange Server\V15\Logging
IIS logging (more useful):  C:\inetpub\logs  (for Exchange Web Services or "EWS")

Note: More information on EWS logs can be found here: http://social.technet.microsoft.com/forums/exchange/en-US/01dd7b22-35fe-4e8b-95c6-615ca7e25287/where-to-change-path-for-ewsprotocollogs

Additional logs can be found from https://blogs.technet.microsoft.com/exchange/2016/05/31/checklist-for-troubleshooting-outlook-connectivity-in-exchange-2013-and-2016-on-premises/

Additional Information

This article was originally published in the GWAVA knowledgebase as article ID 2257.