Solved

How can I find out why an email was delayed in Exchange 2010

Posted on 2013-05-16
10
941 Views
Last Modified: 2013-05-29
We had some very important emails that were time sensitive sent out yesterday, 4 in all. the one we set out at about 5pm somehow sat in Exchange until 100 am this morning. Message tracking shows:

Delivery Report for  email


Submitted
5/15/2013 5:14 PM our.server.com
The message was submitted to our.server.com.

Transferred
5/16/2013 11:04 AM our.server.com
The message was successfully handed off to a different e-mail system. This is as far as we can track it.

Not sure if I'm using Message Tracking right, but all the steps show a time stamp of 2013/05/15 17:14:10

Is there a place to look to see why it was delayed? The Execs aren't happy and want answers  I can't give.

Thanks!
0
Comment
Question by:canuseeit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3
10 Comments
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39173029
If you can get the Original email from the Recipients system and check the Header of the Email it will tell you exactly where if so the delay happened with TIme zone and everything

- Rancy
0
 
LVL 14

Expert Comment

by:comfortjeanius
ID: 39173030
0
 
LVL 16

Expert Comment

by:Rajitha Chimmani
ID: 39173063
Check the application/system logs on the Exchange servers during that time if you believe the delay was on Exchange servers. If you find any errors there then you could work from there to find the root cause.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 4

Expert Comment

by:mouseware
ID: 39173070
You'll need to look through your SMTP logs (assuming you have logging enabled) and find that message. You should see the reason for the delay or failure. It could have been submitted on time, but there were failures out of your organization's control that prevented the message from reaching the recipient. Basicly you are looking for SMTP errors from 5PM to 11AM the following day for that message ID or recipient which indicate why it took so long to send. YOu may find something like recipient's server not responding/timeout/busy/etc.
0
 

Author Comment

by:canuseeit
ID: 39173324
The issue was it was an PR annoucment to our customers, so it was a long list of 200 contacts all in the bcc. The first 3 were only to about 50 email addresses and all went without a hitch. The last one we sent got delayed.

I am checking the logs now, I will report back to see if there is something there I don't understand.

For Rancy, I'm not going to post the entire thing, but here is the part from when I sent it, and the next part that is 18 hours later

Received: from mail.ourserver.com (ip.add.re.ss) by CO9EHSMHS002.bigfish.com
 (10.236.130.12) with Microsoft SMTP Server id 14.1.225.23; Thu, 16 May 2013
 18:06:15 +0000
Received: from mail.ourserver.com ([::1]) by mail.ourserver.com ([::1]) with
 mapi id 14.01.0421.002; Wed, 15 May 2013 17:14:10 -0700
0
 

Author Comment

by:canuseeit
ID: 39173328
unfortunetly I am stupid andout logging is only goes back to yesterday at 10:48pm... sigh
0
 
LVL 16

Expert Comment

by:Rajitha Chimmani
ID: 39173343
Uhhh :( Just wondering if there is a way out to find a root cause without logs. Have you checked that on all servers involved?
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 39173382
Received: from mail.ourserver.com ([::1]) by mail.ourserver.com ([::1]) with
 mapi id 14.01.0421.002; Wed, 15 May 2013 17:14:10 -0700

Are both servers in Question the same or different ones ?

- Rancy
0
 
LVL 4

Accepted Solution

by:
Jeffery Hayes earned 395 total points
ID: 39173586
Received: from mail.ourserver.com (ip.add.re.ss) by CO9EHSMHS002.bigfish.com
 (10.236.130.12) with Microsoft SMTP Server id 14.1.225.23; Thu, 16 May 2013
 18:06:15 +0000
Received: from mail.ourserver.com ([::1]) by mail.ourserver.com ([::1]) with
 mapi id 14.01.0421.002; Wed, 15 May 2013 17:14:10 -0700

Bigfish would be forefront which is the Edge filter.

Look at the complete message Header's and see if there is any antivirus that is touching the mail. The delay occurs between when your server sends out the message externally and to the edge filter.

Other things to check is that this could have simply been due to message queuing as I understand that the message was sent to many recipients.
0
 

Author Closing Comment

by:canuseeit
ID: 39205959
Correct we use Forefront protection. That is where the item got stuck, even though I have forefront turned OFF for outgoing mail. There is nothing except a delay leaving there. there is no other error, so I opened a ticket with Microsoft on this.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question