xmsingh
asked on
Exchange MSExchange Mid-Tier Storage Audit Event 2006
Hello all
I am suddenly seeing massive amounts of a warning event in the event logs of a clients mailbox server.
I am unable to find any information about this event online so I will greatly appreciate any help I can get.
They are running Exchange Server 2013 Cumulative Update 13 (CU13)
Event ID: 2006
Source: MSExchange Mid-Tier Storage
Task Category: Audit
Level: Warning
MSExchange Mid-Tier Storage\Audit is set to expert.
[Process:Microsoft.Exchang e.RpcClien tAccess.Se rvice PID:5228 Thread:20] Error occurred while resolving message subject of item 'RgAAAABeMdWMNpvUEaksABCD/ cLrBwDLOAZ Hh47UEaksA BCD/cLrAAA ADXRSAADGD do4yer+SJr ft/Gu4Qw1A AAZlGQ5AAA A'. The subject of this item will not be available. Current mailbox: 'example@example.com' a0b52fb3-85b6-412c-a6c6-4d 3e123d0cae . Logon type: Owner. Logon user SID: 'S-1-5-21-72666444-1982495 053-124684 5465-1042' . Operation: SoftDelete. Exception details:
Microsoft.Exchange.Data.St orage.Obje ctNotFound Exception: The process failed to get the correct properties. ---> Microsoft.Mapi.MapiExcepti onNotFound : MapiExceptionNotFound: Unable to get properties on object. (hr=0x8004010f, ec=-2147221233)
Diagnostic context:
Lid: 55847 EMSMDBPOOL.EcPoolSessionDo Rpc called [length=843]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDo Rpc returned [ec=0x0][length=238][laten cy=0]
Lid: 52176 ClientVersion: 15.0.1210.3
Lid: 50032 ServerVersion: 15.0.1210.6003
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropOpenMessage [3]
Lid: 17082 ROP Error: 0x8004010F
Lid: 26977
Lid: 21921 StoreEc: 0x8004010F
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 50428
Lid: 59416 StoreEc: 0x8004010F
Lid: 38536
Lid: 10786 dwParam: 0x0 Msg: 15.00.1210.000:HA-PRD-MBX0 1
Lid: 1750 ---- Remote Context End ----
Lid: 27962 ROP: ropGetPropsSpecific [7]
Lid: 17082 ROP Error: 0x4B9
Lid: 26465
Lid: 21921 StoreEc: 0x4B9
Lid: 31418 --- ROP Parse Done ---
Lid: 22753
Lid: 21817 ROP Failure: 0x4B9
Lid: 20385
Lid: 28577 StoreEc: 0x8004010F
Lid: 32001
Lid: 29953 StoreEc: 0x8004010F
Lid: 32768
Lid: 33024 StoreEc: 0x8004010F
at Microsoft.Mapi.MapiExcepti onHelper.I nternalThr owIfErrorO rWarning(S tring message, Int32 hresult, Boolean allowWarnings, Int32 ec, DiagnosticContext diagCtx, Exception innerException)
at Microsoft.Mapi.MapiExcepti onHelper.T hrowIfErro r(String message, Int32 hresult, IExInterface iUnknown, Exception innerException)
at Microsoft.Mapi.MapiProp.Ge tProps(ICo llection`1 propTagsRequested)
at Microsoft.Exchange.Data.St orage.Mapi PropertyBa g.GetPrope rties(ILis t`1 propertyDefinitions)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.St orage.Mapi PropertyBa g.GetPrope rties(ILis t`1 propertyDefinitions)
at Microsoft.Exchange.Data.St orage.Stor eObjectPro pertyBag.I nternalLoa d(ICollect ion`1 extraProperties)
at Microsoft.Exchange.Data.St orage.Stor eObjectPro pertyBag.. ctor(Store Session session, MapiProp mapiProp, ICollection`1 autoloadProperties, Boolean canSaveOrDisposeMapiProp)
at Microsoft.Exchange.Data.St orage.Item Builder.Co reItemBind (StoreSess ion session, StoreId storeId, MapiMessageCreator mapiMessageCreator, ItemBindOption itemBindOption, ICollection`1 propertiesToLoad, StoreObjectType& storeObjectType)
at Microsoft.Exchange.Data.St orage.Core Item.Bind( StoreSessi on session, StoreId storeId, ICollection`1 propsToReturn)
at Microsoft.Exchange.Data.St orage.COWA udit.Inter nalGroupOp eration(CO WSettings settings, IDumpsterItemOperations dumpster, COWTriggerAction operation, FolderChangeOperationFlags flags, StoreSession sourceSession, StoreSession destinationSession, StoreObjectId destinationFolderId, StoreObjectId[] itemIds, GroupOperationResult result, Boolean onBeforeNotification, CallbackContext callbackContext)
I am suddenly seeing massive amounts of a warning event in the event logs of a clients mailbox server.
I am unable to find any information about this event online so I will greatly appreciate any help I can get.
They are running Exchange Server 2013 Cumulative Update 13 (CU13)
Event ID: 2006
Source: MSExchange Mid-Tier Storage
Task Category: Audit
Level: Warning
MSExchange Mid-Tier Storage\Audit is set to expert.
[Process:Microsoft.Exchang
Microsoft.Exchange.Data.St
Diagnostic context:
Lid: 55847 EMSMDBPOOL.EcPoolSessionDo
Lid: 43559 EMSMDBPOOL.EcPoolSessionDo
Lid: 52176 ClientVersion: 15.0.1210.3
Lid: 50032 ServerVersion: 15.0.1210.6003
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropOpenMessage [3]
Lid: 17082 ROP Error: 0x8004010F
Lid: 26977
Lid: 21921 StoreEc: 0x8004010F
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 50428
Lid: 59416 StoreEc: 0x8004010F
Lid: 38536
Lid: 10786 dwParam: 0x0 Msg: 15.00.1210.000:HA-PRD-MBX0
Lid: 1750 ---- Remote Context End ----
Lid: 27962 ROP: ropGetPropsSpecific [7]
Lid: 17082 ROP Error: 0x4B9
Lid: 26465
Lid: 21921 StoreEc: 0x4B9
Lid: 31418 --- ROP Parse Done ---
Lid: 22753
Lid: 21817 ROP Failure: 0x4B9
Lid: 20385
Lid: 28577 StoreEc: 0x8004010F
Lid: 32001
Lid: 29953 StoreEc: 0x8004010F
Lid: 32768
Lid: 33024 StoreEc: 0x8004010F
at Microsoft.Mapi.MapiExcepti
at Microsoft.Mapi.MapiExcepti
at Microsoft.Mapi.MapiProp.Ge
at Microsoft.Exchange.Data.St
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
NA