We help IT Professionals succeed at work.

Exchange Emails Delayed

itgolfer
itgolfer asked
on
55 Views
Last Modified: 2016-03-22
The last two days, around 5:30am, a lot of delayed emails are being sent to our users. Some of them are a day or two old but some are up to a week old. When I look in the spam filter, I see them going through at the correct time so I think it's something with Exchange. Is there a log or something I can look at for a specific email that was delayed to see why? I restarted the Transport service yesterday but we still received a bunch of delayed emails this morning. We are on Exchange 2010.
Comment
Watch Question

CERTIFIED EXPERT

Commented:
Is your Exchange server under resource constraints, as in low disk space, high memory or CPU usage?

A nightly process such as a backup may be causing back pressure on your Exchange server.

Check the event logs as a starting point.
CERTIFIED EXPERT

Commented:
Look for Back Pressure event ID's 15004, 15005, 15006, 15007

Look for event ID 1021 for any incoming connection rejected by Exchange.

Use Message Tracking logs and check for MessageLatency and MessageLatencyType for find delay

Author

Commented:
The resources are fine. We have run into that in the past but it doesn't appear the issue this time.

I filtered the log for all of those IDs but there was only a couple of entries from the 1021 but nothing recent.

where do I find the message tracking logs? Is that in the Exchange Management Console?
CERTIFIED EXPERT

Commented:
Yes its in the Toolbox in the EMC

Alternatively you can use the powershell - https://technet.microsoft.com/en-us/library/aa997573(v=exchg.160).aspx
CERTIFIED EXPERT

Commented:
Get-TransportServer | Get-MessageTrackingLog -Sender <SenderEmail> -Recipients <RecipientEmail> -MessageSubject "MessageSubject" -Start "mm/dd/yyyy" -End "mm/dd/yyyy" | FT

Look for MessageLatency and MessageLatencyType attributes

Author

Commented:
OK, so I've found one of the emails that was sent to me on 2/8 and delivered this morning. What should I be looking for?

Thanks.

Author

Commented:
I thought maybe the problem went away as we didn't have it happen again. However, it happened again this morning. What should I be looking for when I find the email(s) in the message tracking logs?
CERTIFIED EXPERT

Commented:
Look at the message header of an email that's was delayed - this will show you at what point there was a delay

Author

Commented:
OK, here is the first part of one the delayed emails. I'm still not sure where the issue is after looking at this. The email should have been delivered at 6:14PM CST (4:14 PST) but was delivered to me at 2:58am CST.



Received: from SPAMFILTER (148.163.129.52) by EXCHANGE (EXCHANGE IP) with Microsoft SMTP Server id 14.3.266.1; Thu, 25 Feb 2016 02:58:10 -0600
Received: from SPAMFILTER (unknown [IP])      by SPAMFILTER with ESMTP id 13FEA200A3      for <MY EMAIL ADDRESS>; Thu, 25 Feb 2016 00:14:25 +0000 (UTC)
X-Virus-Scanned: SPAMFILTER engine
Received: from mail-ig0-f177.google.com (mail-ig0-f177.google.com
 [209.85.213.177])      (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256
 (128/128 bits))      (No client certificate requested)      by SPAMFILTER with ESMTPS id BC11A200DD      for <MY EMAIL ADDRESS>; Thu, 25 Feb 2016 00:14:24 +0000 (UTC)
Received: by mail-ig0-f177.google.com with SMTP id y8so2873237igp.0        for <MY EMAIL ADDRESS>; Wed, 24 Feb 2016 16:14:24 -0800 (PST)
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.