How to delete AALogs change logs (4033577)

The following details options for removing change logs (AALogs) found in the System Volume Information folder. Change log files are named AALog_ followed by an ID, for example, AALog_{15f075c8-193a-11e7-a5c6-180373d9df42}_000001b8.log.

1. Open the Core Console and go to the Summary page of the Machine you need to clear change logs.
2. In the Volumes section, select the volume(s) you need to clear change logs and open the Protection Schedule.
3. Remove the volume(s) from protection and click Apply.
4. Refresh metadata and wait a few minutes.
5. Add the volume(s) back to the protection schedule and click Apply. Change logs will be removed.
6. If change logs are not removed repeat the steps waiting longer on step 4. If change logs still do not remove you will need Solution 2.

• NOTE:  You can also force a base image of only the affected volume that is suspected to be full of the change logs once it is in its own protect group.  This should clear the logs as well.

Solutions 2: For all Machines, any Agent build:

NOTE: If using Solution 2 once the fltmc is unloaded your operating system may automatically reboot on you.

1. Stop Agent Service and set to Disabled
2. If working with the System Reserved Partition (SRP volume), assign a Drive Letter or Path to SRP through Disk Management @ diskmgmt.msc.
3. Gain access to System Volume Information folder on volume(s) where you will be deleting AALogs.
4. Unload the filter driver:
   1. FltMC Method: In an elevated CMD enter the following command, fltmc unload aafsflt.
   2. AssureMC Method:
      1. Download version of AssureMC needed for x86 or x64 operating system, see files attached to this KB.
      2. Unblock download (if blocked), and unzip to whatever location you like.
      3. Open an elevated command prompt and change directory to directory containing Assuremc.exe.
      4. Enter the following command for each volume you need to delete AALogs, assuremc disable C: (replace C: with drive letter or path needed).
5. Delete AALogs:
   1. In elevated command prompt change directory System Volume Information folder you need to delete AALogs
   2. Enter the following command, del aalog*.*
   3. Repeat for every volume you must delete AALogs.
6. Load the filter driver:
   1. FltMC Method: In an elevated CMD enter the following command, fltmc load aafsflt.
   2. AssureMC Method:
      1. In elevated command prompt and change directory to directory containing Assuremc.exe.
      2. Enter the following command for each volume previously disabled, assuremc enable C: (replace C: with drive letter or path needed).
7. If working with the System Reserved Partition (SRP volume), remove Drive Letter or Path to SRP through Disk Management.
8. Set Agent Service to Automatic (Delayed Start) and start Agent Service.