Avatar of itgolfer
itgolfer asked on

Exchange Emails Delayed

The last two days, around 5:30am, a lot of delayed emails are being sent to our users. Some of them are a day or two old but some are up to a week old. When I look in the spam filter, I see them going through at the correct time so I think it's something with Exchange. Is there a log or something I can look at for a specific email that was delayed to see why? I restarted the Transport service yesterday but we still received a bunch of delayed emails this morning. We are on Exchange 2010.

Avatar of undefined
Last Comment

8/22/2022 - Mon

Is your Exchange server under resource constraints, as in low disk space, high memory or CPU usage?

A nightly process such as a backup may be causing back pressure on your Exchange server.

Check the event logs as a starting point.
Mahesh Sharma

Look for Back Pressure event ID's 15004, 15005, 15006, 15007

Look for event ID 1021 for any incoming connection rejected by Exchange.

Use Message Tracking logs and check for MessageLatency and MessageLatencyType for find delay

The resources are fine. We have run into that in the past but it doesn't appear the issue this time.

I filtered the log for all of those IDs but there was only a couple of entries from the 1021 but nothing recent.

where do I find the message tracking logs? Is that in the Exchange Management Console?
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.

Yes its in the Toolbox in the EMC

Alternatively you can use the powershell - https://technet.microsoft.com/en-us/library/aa997573(v=exchg.160).aspx
Mahesh Sharma

Get-TransportServer | Get-MessageTrackingLog -Sender <SenderEmail> -Recipients <RecipientEmail> -MessageSubject "MessageSubject" -Start "mm/dd/yyyy" -End "mm/dd/yyyy" | FT

Look for MessageLatency and MessageLatencyType attributes

OK, so I've found one of the emails that was sent to me on 2/8 and delivered this morning. What should I be looking for?

Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.

I thought maybe the problem went away as we didn't have it happen again. However, it happened again this morning. What should I be looking for when I find the email(s) in the message tracking logs?

Look at the message header of an email that's was delayed - this will show you at what point there was a delay

OK, here is the first part of one the delayed emails. I'm still not sure where the issue is after looking at this. The email should have been delivered at 6:14PM CST (4:14 PST) but was delivered to me at 2:58am CST.

Received: from SPAMFILTER ( by EXCHANGE (EXCHANGE IP) with Microsoft SMTP Server id; Thu, 25 Feb 2016 02:58:10 -0600
Received: from SPAMFILTER (unknown [IP])      by SPAMFILTER with ESMTP id 13FEA200A3      for <MY EMAIL ADDRESS>; Thu, 25 Feb 2016 00:14:25 +0000 (UTC)
X-Virus-Scanned: SPAMFILTER engine
Received: from mail-ig0-f177.google.com (mail-ig0-f177.google.com
 [])      (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256
 (128/128 bits))      (No client certificate requested)      by SPAMFILTER with ESMTPS id BC11A200DD      for <MY EMAIL ADDRESS>; Thu, 25 Feb 2016 00:14:24 +0000 (UTC)
Received: by mail-ig0-f177.google.com with SMTP id y8so2873237igp.0        for <MY EMAIL ADDRESS>; Wed, 24 Feb 2016 16:14:24 -0800 (PST)
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question