Sql server reporting service下 LogFiles中日志不断添加,特别是mdmp超过100M的大文件不停增加解决办法
前些天一直因磁盘被LogFiles中日志文件太大,导致笔记本的磁盘不够用了。详情可见http://www.360doc.com/content/21/0327/00/17987244_969179879.shtml
但一直没明白为什么SSRS中的logfiles会不断写入呢?于是进入C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\LogFiles这个文件夹中去一探究竟。
3月27号0:55竟然还有日记写入,并且还写入了一个比较大的文件,一个后缀为mdmp的文件。在27号的早上,也就是今天还有写入……但是只是写入了一个log文件,没有再写入超过100M的大文件,并且当前是晚上过了23:30,也没有再次写入,看来昨晚对对日志的分析基本正确。
打开其中一个日志文件(注意下边标注黄色与其他颜色背景的部分),20号的如下:
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, AdjustTokenPrivileges () completed with status (00000514)
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Input parameters: 4 supplied
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Parameter 1: 31604
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Parameter 2: 0
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Parameter 3: 0:0
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Parameter 4: 00007FFED1F31518
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Parsed parameters:
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ProcessID = 31604
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ThreadId = 0
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Flags = 0x0
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, MiniDumpFlags = 0x0
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, SqlInfoPtr = 0x00007FFED1F31518
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, DumpDir = <NULL>
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ExceptionRecordPtr = 0x0000000000000000
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ContextPtr = 0x0000000000000000
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ExtraFile = <NULL>
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, PatternForExtraFiles = <NULL>
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, InstanceName = <NULL>
(4570:3C9C) 01/20/21 15:37:57, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, ServiceName = <NULL>
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Remote process didn't specify a dump file name
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Target suspended
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, MINIDUMP_TYPE: 0x1163
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Callback type 16 not used
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Callback type 17 not used
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Callback type 11 not used
(4570:3C9C) 01/20/21 15:37:57, ACTION, RSManagement.exe, Callback type 15 not used
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Callback type 7 not used
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, MiniDump completed: ..\LogFiles\SQLDmpr0001.mdmp
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Total Buffer pool data pages filtered out: 0 KB
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Total Hekaton data pages filtered out: 0 KB
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Total Free memory (from non top level allocators) filtered out: 0 KB
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Total top level free memory filtered out: 0 KB
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Total Log pool memory filtered out: 0 KB
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Location of module 'dbghelp.dll' : 'C:\WINDOWS\SYSTEM32\dbghelp.dll'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, File version of module 'C:\WINDOWS\SYSTEM32\dbghelp.dll' : '6.2:17763.1'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Product version of module 'C:\WINDOWS\SYSTEM32\dbghelp.dll' : '10.0:17763.1'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Location of module 'sqldumper.exe' : 'C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Management\SQLDUMPER.EXE'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, File version of module 'C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Management\SQLDUMPER.EXE' : '2017.140:3015.40'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Product version of module 'C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Management\SQLDUMPER.EXE' : '14.0:3015.40'
(4570:3C9C) 01/20/21 15:38:00, ACTION, RSManagement.exe, Watson Invoke: No
仔细看了下,日志中在不断重复上述几十条语句,不停的调用SQLDUMPER_UNKNOWN_APP.EXE和RSManagement.exe这两个exe可执行程序。
并且上述日志还给出了 'C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Management\SQLDUMPER.EXE' 这个地址。
在C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Management下不仅找到了sqldumper.exe还有RSmanagement.exe 。
继然会不断调用这两个混蛋程序,那小子直接将其删除,应该就能避免不断写入100多M的较大文件了,遂将这两个exe删除。
从今天(2021年3月27号)一天的情况来看,删除这两个exe文件是有效的,今天一天,C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\LogFiles文件夹下再也没有增加100M的mdmp文件了。