This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 6%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
This was triggered by event ID 104.
I cant really find related info on the throttlingconfig log.
What does the throttling config do? or what is it used for?
The 'ThrottlingConfig log file was cleared' by the user 'SYSTEM'.
What are the security related concerns for the file being cleared by the user'SYSTEM'?
You mentioned that its a normal phenomenon.
Is there any microsoft docuemnt/website that Event ID 104 is a normal event and its informational.
About the The 'ThrottlingConfig log file was cleared' by the user 'SYSTEM'.
If clearing of this log is a normal event carried out by system operations?
Whats your take on that?
It would be great if you any related docuemnst/website that i can refer to for this.
Based on my searching, there doesn't exist article describing this phenomenon. You could try to choose this option, check whether it effect this phenomenon:
About why those logs are deleted, you may need to open a ticket to check with Microsoft. Personally, I don’t think it’s necessary, if we have know this phenomenon isn't caused by hacker attack.
This Event ID is also exist in my lab, so, we can know it is a normal phenomenon:
About the functions of "Microsoft-Exchange-ManagedAvailability\ThrottlingConfig", there is one of them
You could find the “Microsoft-Exchange-ManagedAvailability\ThrottlingConfig” from this place:
About why old logs were deleted automatically, you may need open a ticket to check with Microsoft.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 35%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMR%3C/text%3E%3C/svg%3E)
Hello, Is there any update regarding this? Why the logs were deleted? I have faced the same issue.