Home

Welcome to the Measure-NTFS-USN-consumption wiki!

This script queries the NTFS USN journal to determine if you have a high USN consumption rate.

The default script settings are a 60 second sample with a threshold of 1,000,000 USN's and will log an event in the System event log with the results. If you do not exceed the threshold, the event will be Informational type, and if you exceed the threshold the event will be an Error type. The script also retains (in the registry) and reports the Journal ID of the volume(s) checked. If the Journal ID changes a System event log error will be logged.

This script should be suitable for monitoring DFSR and FRS volumes for NTFS Journal Wrap issues.

#Useage: #Measure-UsnConsumption [-DurationInSeconds][-UsnConsumptionThreshold][-DriveLetter][-DriveLetter]

Switches:

-DurationInSeconds Duration between the sample of NextUSN. Default is 60 seconds

-UsnConsumptionThreshold The threshold that a event log error will be generated based on the difference between the new NextUSN samples. Default is 1,000,000

-DriveLetter The volume to run the test agains. Default is the volume of the system drive.

-LogEvent Log results in System event log. Boolean. Default is $True