We help IT Professionals succeed at work.

MS exchange event ID 4401

bankadmin
bankadmin used Ask the Experts™
on
Running 2012R2 with exchange 2013 CU20 the MSExChangeRepl service error out repeatedly. I have research it a bit and found several article instructing me to do the this command
Wevtutil.exe cl "Microsoft-Exchange-MailboxDatabaseFailureItems/Operational"
Which I did last night but the error is still happening and its preventing our logs from being truncated during backup.  
The error is in application logs, event ID 4401 source MSEchangeRepl
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
I forgot to mention that on our exchange server we have SQL running also for our mail scanning  AV. and that DB is not truncating either.
I would suggest posting the complete event rather than just the event number.

Author

Commented:
The error is below


Microsoft Exchange Server Locator Service failed to find active server for database '15398251-6ea9-455a-a0dd-19b7697387ae'. Error: The database with ID 15398251-6ea9-455a-a0dd-19b7697387ae couldn't be found.
is this a single server, or is a DAG in use ?

Author

Commented:
Its a single server

Author

Commented:
The DAG management service is running, I did not do the initial build of this exchange server..  we only have one exchange server
Please post the output from Get-DatabaseAvailabilityGroup, Get-MailboxDatabase, and Get-MailboxDatabaseCopyStatus. All need to be run from the Exchange Management Shell.

Author

Commented:
I didn't get any data returned when I ran Get-DatabaseAvailabilityGroup no errors when running I also tried to output the data to a file which did create the file but no data was in it.
exchange-ss.jpg
For future reference, it is much better to post text output as text rather than taking a screenshot.

is there a reason for the dismounted database ?

if you run get-mailboxdatabase | fl, does the ID from the error match one of the databases ?

Author

Commented:
The rest of the outputs from the commands are attached in the previous post

Author

Commented:
I ran the command and the RunspaceId does not match the database in the event viewer error I also did a search of the output and there was no matching string. To be honest I'm not sure what that other DB is for or why its there.

Also this exchange server has SQL on it for our scanmail antivirus
are you able to mount the database ?

Author

Commented:
I could try, do you think it could cause any issues if I do?
Mounting a database is unlikely to cause ay issues

Author

Commented:
Ok I can try that although this DB was disabled when we didn't have this issue. I'm not sure exactly when it started it was either the CU20 update or the rebuilding of ScanMail.

Author

Commented:
I mounted the DB this morning and since doing so I haven't seen the error, however I am getting another error I haven't seen to this point. I haven't researched it yet

Log Name:      Application
Source:        MSExchange Store Driver Submission
Date:          12/19/2019 8:24:04 AM
Event ID:      1012
Task Category: MSExchangeStoreDriverSubmission
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      
Description:
The store driver failed to submit event 1210627934 mailbox 279349c9-c857-480c-ba8d-cdb6cd29ed8e MDB 6624b063-c0ca-4c73-af18-2735d56c7d96 and couldn't generate an NDR due to exception Microsoft.Exchange.MailboxTransport.StoreDriverCommon.InvalidSenderException
   at Microsoft.Exchange.MailboxTransport.Shared.SubmissionItem.SubmissionItemUtils.CopySenderTo(SubmissionItemBase submissionItem, TransportMailItem message)
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.GenerateNdrMailItem()
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.<>c__DisplayClass1.<FailedSubmissionNdrWorker>b__0()
   at Microsoft.Exchange.MailboxTransport.StoreDriverCommon.StorageExceptionHandler.RunUnderTableBasedExceptionHandler(IMessageConverter converter, StoreDriverDelegate workerFunction).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange Store Driver Submission" />
    <EventID Qualifiers="49156">1012</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-12-19T14:24:04.000000000Z" />
    <EventRecordID>37017884</EventRecordID>
    <Channel>Application</Channel>
    <Computer>exchange2013.fnbwalker.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>1210627934</Data>
    <Data>279349c9-c857-480c-ba8d-cdb6cd29ed8e</Data>
    <Data>6624b063-c0ca-4c73-af18-2735d56c7d96</Data>
    <Data>Microsoft.Exchange.MailboxTransport.StoreDriverCommon.InvalidSenderException
   at Microsoft.Exchange.MailboxTransport.Shared.SubmissionItem.SubmissionItemUtils.CopySenderTo(SubmissionItemBase submissionItem, TransportMailItem message)
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.GenerateNdrMailItem()
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.&lt;&gt;c__DisplayClass1.&lt;FailedSubmissionNdrWorker&gt;b__0()
   at Microsoft.Exchange.MailboxTransport.StoreDriverCommon.StorageExceptionHandler.RunUnderTableBasedExceptionHandler(IMessageConverter converter, StoreDriverDelegate workerFunction)</Data>
  </EventData>
</Event>

Author

Commented:
Thanks for the help with this after I mounted the DB the truncating started to function correctly..