Transport service stops daily
Hello, We are currently in the process of moving from a windows 2003 exchange server to a windows 2008 r2 sp1 server with Exchange 2010. I have about 10 mailboxes left to migrate over.
My issue is that since the end of December (after Exchange 2010 was brought up to sp2 RU 6)
The Exchange services keep on crashing, mainly the transport service as this happens about once a day but also RPC and replication.
Here is what im seeing in the logs:
Log Name: Application
Source: MSExchangeTransport
Date: 2/21/2013 9:32:59 AM
Event ID: 12025
Task Category: TransportService
Level: Warning
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
Transport service is disconnecting performance counters with process lifetime from their old process.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeTransport"
<EventID Qualifiers="32772">12025</
<Level>3</Level>
<Task>12</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252861</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: MSExchangeTransport
Date: 2/21/2013 9:32:59 AM
Event ID: 12028
Task Category: TransportService
Level: Warning
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
The process with process ID 4248 is holding the performance counter server alive Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4248 StartupTime: 130059311733750000 from instance _total(CFBEE918) RefCount=0 SpinLock=0 Offset=32 and category MSExchangeTransport ServerAlive while running processes are: Processes running are:
7256 w3wp
3544 MSExchangeMailboxReplicati
3740 Microsoft.Exchange.Protect
8016 w3wp
580 lsm
2744 Microsoft.Exchange.EdgeSyn
7076 svchost
2148 msftesql
932 MsMpEng
3324 Microsoft.Exchange.Service
564 services
2532 svchost
1740 LicService
2724 dfssvc
752 svchost
2928 svchost
8432 mmc
6852 csrss
1924 ismserv
6452 rdpclip
5860 iashost
7512 msseces
2508 svchost
1324 store
140 svchost
2700 svchost
7008 dw20
924 LogonUI
2040 exfba
1116 explorer
5876 dwm
7344 svchost
320 smss
2880 Microsoft.Exchange.Address
2088 mad
5652 vds
3356 MSExchangeMailboxAssistant
4248 MSExchangeTransport
504 winlogon
1092 svchost
6016 w3wp
4044 Microsoft.Exchange.Search.
8180 wuauclt
3648 InetMgr
1676 svchost
5812 svchost
476 csrss
1864 inetinfo
6008 taskmgr
2452 ntfrs
2052 Microsoft.Exchange.Antispa
5616 taskhost
8156 w3wp
8096 mmc
8548 w3wp
468 wininit
3616 MSExchangeMailSubmission
1840 dns
460 svchost
1640 Microsoft.ActiveDirectory.
2424 nscp
6560 msdtc
1580 spoolsv
644 svchost
840 svchost
3200 MsExchangeFDS
8120 DTShellHlp
6148 dllhost
1812 svchost
7524 DTAgent
1612 armsvc
8900 msexchangerepl
7672 svchost
4760 w3wp
4168 MSExchangeThrottling
424 svchost
4560 VMUpgradeHelper
3968 Microsoft.Exchange.RpcClie
4360 MSExchangeTransportLogSear
4752 w3wp
416 csrss
6704 msftefd
572 lsass
2184 SMSvcHost
1000 svchost
1780 dfsrs
1976 MSExchangeADTopologyServic
4 System
2564 vmtoolsd
7488 VMwareTray
6876 winlogon
0 Idle
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeTransport"
<EventID Qualifiers="32772">12028</
<Level>3</Level>
<Task>12</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252864</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
<Data>4248</Data>
<Data>server alive Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4248 StartupTime: 130059311733750000</Data>
<Data>_total(CFBEE918) RefCount=0 SpinLock=0 Offset=32</Data>
<Data>MSExchangeTransport ServerAlive</Data>
<Data>Processes running are:
7256 w3wp
3544 MSExchangeMailboxReplicati
3740 Microsoft.Exchange.Protect
8016 w3wp
580 lsm
2744 Microsoft.Exchange.EdgeSyn
7076 svchost
2148 msftesql
932 MsMpEng
3324 Microsoft.Exchange.Service
564 services
2532 svchost
1740 LicService
2724 dfssvc
752 svchost
2928 svchost
8432 mmc
6852 csrss
1924 ismserv
6452 rdpclip
5860 iashost
7512 msseces
2508 svchost
1324 store
140 svchost
2700 svchost
7008 dw20
924 LogonUI
2040 exfba
1116 explorer
5876 dwm
7344 svchost
320 smss
2880 Microsoft.Exchange.Address
2088 mad
5652 vds
3356 MSExchangeMailboxAssistant
4248 MSExchangeTransport
504 winlogon
1092 svchost
6016 w3wp
4044 Microsoft.Exchange.Search.
8180 wuauclt
3648 InetMgr
1676 svchost
5812 svchost
476 csrss
1864 inetinfo
6008 taskmgr
2452 ntfrs
2052 Microsoft.Exchange.Antispa
5616 taskhost
8156 w3wp
8096 mmc
8548 w3wp
468 wininit
3616 MSExchangeMailSubmission
1840 dns
460 svchost
1640 Microsoft.ActiveDirectory.
2424 nscp
6560 msdtc
1580 spoolsv
644 svchost
840 svchost
3200 MsExchangeFDS
8120 DTShellHlp
6148 dllhost
1812 svchost
7524 DTAgent
1612 armsvc
8900 msexchangerepl
7672 svchost
4760 w3wp
4168 MSExchangeThrottling
424 svchost
4560 VMUpgradeHelper
3968 Microsoft.Exchange.RpcClie
4360 MSExchangeTransportLogSear
4752 w3wp
416 csrss
6704 msftefd
572 lsass
2184 SMSvcHost
1000 svchost
1780 dfsrs
1976 MSExchangeADTopologyServic
4 System
2564 vmtoolsd
7488 VMwareTray
6876 winlogon
0 Idle
</Data>
</EventData>
</Event>
Log Name: Application
Source: ExchangeStoreDB
Date: 2/21/2013 9:32:40 AM
Event ID: 220
Task Category: Database recovery
Level: Error
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
At '2/21/2013 9:32:08 AM' the Exchange store database 'DBMSDB1' copy on this server appears to have failed due to insufficient memory. The error returned by failover was "There is only one copy of this mailbox database (DBMSDB1). Automatic recovery is not available.". For more detail about the failure, consult the Event log on the server for other "ExchangeStoreDb" events.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ExchangeStoreDB" />
<EventID Qualifiers="49156">220</Ev
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252499</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
<Data>DBMSDB1</Data>
<Data>30c682be-7371-46c2-8
<Data>Ese</Data>
<Data>Memory</Data>
<Data>DBMSDB1</Data>
<Data>
</Data>
<Data>There is only one copy of this mailbox database (DBMSDB1). Automatic recovery is not available.</Data>
<Data>2/21/2013 9:32:08 AM</Data>
<Data>None</Data>
<Data>
</Data>
<Data>0</Data>
<Data>0</Data>
</EventData>
</Event>
Any help would be greatly appreciated.
My issue is that since the end of December (after Exchange 2010 was brought up to sp2 RU 6)
The Exchange services keep on crashing, mainly the transport service as this happens about once a day but also RPC and replication.
Here is what im seeing in the logs:
Log Name: Application
Source: MSExchangeTransport
Date: 2/21/2013 9:32:59 AM
Event ID: 12025
Task Category: TransportService
Level: Warning
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
Transport service is disconnecting performance counters with process lifetime from their old process.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeTransport"
<EventID Qualifiers="32772">12025</
<Level>3</Level>
<Task>12</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252861</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: MSExchangeTransport
Date: 2/21/2013 9:32:59 AM
Event ID: 12028
Task Category: TransportService
Level: Warning
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
The process with process ID 4248 is holding the performance counter server alive Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4248 StartupTime: 130059311733750000 from instance _total(CFBEE918) RefCount=0 SpinLock=0 Offset=32 and category MSExchangeTransport ServerAlive while running processes are: Processes running are:
7256 w3wp
3544 MSExchangeMailboxReplicati
3740 Microsoft.Exchange.Protect
8016 w3wp
580 lsm
2744 Microsoft.Exchange.EdgeSyn
7076 svchost
2148 msftesql
932 MsMpEng
3324 Microsoft.Exchange.Service
564 services
2532 svchost
1740 LicService
2724 dfssvc
752 svchost
2928 svchost
8432 mmc
6852 csrss
1924 ismserv
6452 rdpclip
5860 iashost
7512 msseces
2508 svchost
1324 store
140 svchost
2700 svchost
7008 dw20
924 LogonUI
2040 exfba
1116 explorer
5876 dwm
7344 svchost
320 smss
2880 Microsoft.Exchange.Address
2088 mad
5652 vds
3356 MSExchangeMailboxAssistant
4248 MSExchangeTransport
504 winlogon
1092 svchost
6016 w3wp
4044 Microsoft.Exchange.Search.
8180 wuauclt
3648 InetMgr
1676 svchost
5812 svchost
476 csrss
1864 inetinfo
6008 taskmgr
2452 ntfrs
2052 Microsoft.Exchange.Antispa
5616 taskhost
8156 w3wp
8096 mmc
8548 w3wp
468 wininit
3616 MSExchangeMailSubmission
1840 dns
460 svchost
1640 Microsoft.ActiveDirectory.
2424 nscp
6560 msdtc
1580 spoolsv
644 svchost
840 svchost
3200 MsExchangeFDS
8120 DTShellHlp
6148 dllhost
1812 svchost
7524 DTAgent
1612 armsvc
8900 msexchangerepl
7672 svchost
4760 w3wp
4168 MSExchangeThrottling
424 svchost
4560 VMUpgradeHelper
3968 Microsoft.Exchange.RpcClie
4360 MSExchangeTransportLogSear
4752 w3wp
416 csrss
6704 msftefd
572 lsass
2184 SMSvcHost
1000 svchost
1780 dfsrs
1976 MSExchangeADTopologyServic
4 System
2564 vmtoolsd
7488 VMwareTray
6876 winlogon
0 Idle
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeTransport"
<EventID Qualifiers="32772">12028</
<Level>3</Level>
<Task>12</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252864</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
<Data>4248</Data>
<Data>server alive Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4248 StartupTime: 130059311733750000</Data>
<Data>_total(CFBEE918) RefCount=0 SpinLock=0 Offset=32</Data>
<Data>MSExchangeTransport ServerAlive</Data>
<Data>Processes running are:
7256 w3wp
3544 MSExchangeMailboxReplicati
3740 Microsoft.Exchange.Protect
8016 w3wp
580 lsm
2744 Microsoft.Exchange.EdgeSyn
7076 svchost
2148 msftesql
932 MsMpEng
3324 Microsoft.Exchange.Service
564 services
2532 svchost
1740 LicService
2724 dfssvc
752 svchost
2928 svchost
8432 mmc
6852 csrss
1924 ismserv
6452 rdpclip
5860 iashost
7512 msseces
2508 svchost
1324 store
140 svchost
2700 svchost
7008 dw20
924 LogonUI
2040 exfba
1116 explorer
5876 dwm
7344 svchost
320 smss
2880 Microsoft.Exchange.Address
2088 mad
5652 vds
3356 MSExchangeMailboxAssistant
4248 MSExchangeTransport
504 winlogon
1092 svchost
6016 w3wp
4044 Microsoft.Exchange.Search.
8180 wuauclt
3648 InetMgr
1676 svchost
5812 svchost
476 csrss
1864 inetinfo
6008 taskmgr
2452 ntfrs
2052 Microsoft.Exchange.Antispa
5616 taskhost
8156 w3wp
8096 mmc
8548 w3wp
468 wininit
3616 MSExchangeMailSubmission
1840 dns
460 svchost
1640 Microsoft.ActiveDirectory.
2424 nscp
6560 msdtc
1580 spoolsv
644 svchost
840 svchost
3200 MsExchangeFDS
8120 DTShellHlp
6148 dllhost
1812 svchost
7524 DTAgent
1612 armsvc
8900 msexchangerepl
7672 svchost
4760 w3wp
4168 MSExchangeThrottling
424 svchost
4560 VMUpgradeHelper
3968 Microsoft.Exchange.RpcClie
4360 MSExchangeTransportLogSear
4752 w3wp
416 csrss
6704 msftefd
572 lsass
2184 SMSvcHost
1000 svchost
1780 dfsrs
1976 MSExchangeADTopologyServic
4 System
2564 vmtoolsd
7488 VMwareTray
6876 winlogon
0 Idle
</Data>
</EventData>
</Event>
Log Name: Application
Source: ExchangeStoreDB
Date: 2/21/2013 9:32:40 AM
Event ID: 220
Task Category: Database recovery
Level: Error
Keywords: Classic
User: N/A
Computer: DBMS-Server.DBMSLAW.COM
Description:
At '2/21/2013 9:32:08 AM' the Exchange store database 'DBMSDB1' copy on this server appears to have failed due to insufficient memory. The error returned by failover was "There is only one copy of this mailbox database (DBMSDB1). Automatic recovery is not available.". For more detail about the failure, consult the Event log on the server for other "ExchangeStoreDb" events.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ExchangeStoreDB" />
<EventID Qualifiers="49156">220</Ev
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-02-21T15:
<EventRecordID>252499</Eve
<Channel>Application</Chan
<Computer>DBMS-Server.DBMS
<Security />
</System>
<EventData>
<Data>DBMSDB1</Data>
<Data>30c682be-7371-46c2-8
<Data>Ese</Data>
<Data>Memory</Data>
<Data>DBMSDB1</Data>
<Data>
</Data>
<Data>There is only one copy of this mailbox database (DBMSDB1). Automatic recovery is not available.</Data>
<Data>2/21/2013 9:32:08 AM</Data>
<Data>None</Data>
<Data>
</Data>
<Data>0</Data>
<Data>0</Data>
</EventData>
</Event>
Any help would be greatly appreciated.
ASKER
I honestly have not been able to find anything relevant to the transport actually failing.
No 3rd party apps on the server either.
Would that be disk space where the mailbox db are? The lowest one i have still has over 10GB of free space.
Ryan.
No 3rd party apps on the server either.
Would that be disk space where the mailbox db are? The lowest one i have still has over 10GB of free space.
Ryan.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Primary reason for Transport problems are lack of disk space and third party apps. Do you have anything else installed on the server? Does AV have the relevant exclusions?
You may also want to consider deploying Exchange 2010 SP3, which corrects a lot of odd issues.
Simon.