Event ID: 1221 not showing up in Application Events
Trying to troubleshoot an issue with Mailbox data stores growing rapidly. Unfortunately, my Application Events do not show EVENT ID: 1221 anywhere. It seems that the main problem is that there are too many unnecessary events filling up. Example: I have a ton of Event ID: 1096 Source: MSExchangeIS Mailbox Store. Also, many informational events about who is logging on. I've checked my logging level with PowerShell and they are all set to LOW and LOWEST so I'm not sure why I'm getting a lot of this junk. I'm getting 7 events per second! So, even with 55,000+ events being listed, I can only go back about 45 minutes at any given time. So, I have no clue if my Exchange Maintenance is even running since I can't find Event ID: 1221. Is there any way to stop some of these events from being listed? Or, is there another way to retrieve the information on the database whitespace and IF Exchange Maintenance IS or is NOT running? Any help would be greatly appreciated! Thank you!!
Check this
http://msexchangetips.blogspot.com/2006/08/exchange-how-to-view-all-registered.html
I think this is for 2003 ?
Is there anyway you can verify this > one 1096 event for every email.
What's your AV ?
http://msexchangetips.blogspot.com/2006/08/exchange-how-to-view-all-registered.html
I think this is for 2003 ?
Is there anyway you can verify this > one 1096 event for every email.
What's your AV ?
have you increased diagnostic login? I guess this 1096 occured if any debugging login in creased .
firojkhan may have a point.
Did you test it ?
Did you test it ?
ASKER
Actually finally figured out that setting the MSExchangeIS\9000 Private\Logons and \9002 System\Table Cache was set to low and that setting it to lowest took care of the problem. Thanks.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
No resolution. Ended up upgrading to new server anyway so troubleshooting was void.
Do you have any eventSink configured for Spam filtering or something ?
Whatever is triggering your 1096 - it is probably for every email hitting your exchange. (just a guess...)