Share via

OneDrive for Business ETL logging may cause hard drive to fill up with one log file

  • Article

OneDrive for Business has ETL logging is automatically set.  The log obtains data about the OneDrive for Business process, groove.exe, synchronizing.  It is in a hidden part of the your computer's user profile:  C:\Users\ProfileName\AppData\Local\Microsoft\Office\Spw\log.  Recently, we have obtained information the symptom is that one log is created and becomes very large.  Currently, it was reported by a customer that one log was over 115 GB.

Workaround:

Microsoft support team and the our Product group are investigating why this is occurring. 

 

Temporary workaround until Microsoft support has fully investigated to determine root cause or more permanent resolution.  There is a registry key that can be set:

1. Launch the registry editor:

      • In Windows 8 or Windows 8.1, swipe in from the right edge of the screen, and then tap Search .  (If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.)
      • Type Regedit in the search box, tap or click Apps, and then tap or click Run .
      • In Windows 7, click Start , type regedit in the Search programs and files box, and then press Enter.

2.  Within Regedit it, select the following to manually add the key and the two values (NOTE: Also, copy the following into Notepad, save the file as GrooveETL.reg (check that you are showing file extensions so that you are not having a .reg.txt)):

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Groove\Development]

"TraceLogCompressionEnabled"=dword:00000001

"EnableEtwTraceLogging"=dword:00000001

 

 3.  After adding the registry key enter in step #2 above OR after merging the above registry key, then select on the lower right side, the OneDrive for Business, and right click on the cloud, and select Exit.

4.  Launch Task Manager (Ctrl+Shift+Esc) or Right-click on the taskbar, then click on Start Task Manager. 

      • Within Task Manager select Details tab (Windows 8 or 8.1), and verify that Groove.exe is no longer listed in the Name column.
        • Within Task Manager, select Msosync.exe, and click on End Task (Windows 8 or 8.1):

 

      • Windows 7:
        • Launch Task Manager (Ctrl+Shift+Esc) or Right-click on the taskbar, then click on Start Task Manager.Within the Task Manager, select Processes tab, then the following:
        • Check if Groove.exe is still running.  If so, then select the OneDrive for Business cloud and right click or left click on it, and choose Exit.
        • Check if Groove process is still running, if not, then proceed to Msosync.exe. 
        • Select MsoSync.exe, then click on the button, End Process.  Follow the dialog boxes to end the process.

 

5.  After the two processes are closed, then proceed to the folder of:  C:\Users\ProfileName\AppData\Local\Microsoft\Office\Spw\logs

      • ProfileName = User's profile name, i.e. Admin or User Account name
      • A step to locate the folder, File Explorer (https://windows.microsoft.com/en-US/windows-8/files-folders-windows-explorer), in the address bar, type in %appdata%, click on the enter key.  This will take you to the path of Roaming, then you can click in the Address bar to the Local folder, then follow the rest of the path of above.
      • Delete the file that is the one large log, in this example, it was 115 GB.  Delete it.

 

6.  After the log is removed, then select OneDrive for Business from the All Programs | Office 2013 | OneDrive for Business, and check if the logs are being created with normal size versus the 1 large ETL log. 

 

Again, once the issue is resolved, then we will report back, and you can remove the temporary workaround.

Comments