MS exchange event ID 4401

I forgot to mention that on our exchange server we have SQL running also for our mail scanning  AV. and that DB is not truncating either.

I would suggest posting the complete event rather than just the event number.

The error is below


Microsoft Exchange Server Locator Service failed to find active server for database '15398251-6ea9-455a-a0dd-19b7697387ae'. Error: The database with ID 15398251-6ea9-455a-a0dd-19b7697387ae couldn't be found.

is this a single server, or is a DAG in use ?

Its a single server

The DAG management service is running, I did not do the initial build of this exchange server..  we only have one exchange server

Please post the output from Get-DatabaseAvailabilityGroup, Get-MailboxDatabase, and Get-MailboxDatabaseCopyStatus. All need to be run from the Exchange Management Shell.

I didn't get any data returned when I ran Get-DatabaseAvailabilityGroup no errors when running I also tried to output the data to a file which did create the file but no data was in it.
exchange-ss.jpg

For future reference, it is much better to post text output as text rather than taking a screenshot.

is there a reason for the dismounted database ?

if you run get-mailboxdatabase | fl, does the ID from the error match one of the databases ?

The rest of the outputs from the commands are attached in the previous post

I ran the command and the RunspaceId does not match the database in the event viewer error I also did a search of the output and there was no matching string. To be honest I'm not sure what that other DB is for or why its there.

Also this exchange server has SQL on it for our scanmail antivirus

I could try, do you think it could cause any issues if I do?

Mounting a database is unlikely to cause ay issues

Ok I can try that although this DB was disabled when we didn't have this issue. I'm not sure exactly when it started it was either the CU20 update or the rebuilding of ScanMail.

I mounted the DB this morning and since doing so I haven't seen the error, however I am getting another error I haven't seen to this point. I haven't researched it yet

Log Name:      Application
Source:        MSExchange Store Driver Submission
Date:          12/19/2019 8:24:04 AM
Event ID:      1012
Task Category: MSExchangeStoreDriverSubmission
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      
Description:
The store driver failed to submit event 1210627934 mailbox 279349c9-c857-480c-ba8d-cdb6cd29ed8e MDB 6624b063-c0ca-4c73-af18-2735d56c7d96 and couldn't generate an NDR due to exception Microsoft.Exchange.MailboxTransport.StoreDriverCommon.InvalidSenderException
   at Microsoft.Exchange.MailboxTransport.Shared.SubmissionItem.SubmissionItemUtils.CopySenderTo(SubmissionItemBase submissionItem, TransportMailItem message)
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.GenerateNdrMailItem()
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.<>c__DisplayClass1.<FailedSubmissionNdrWorker>b__0()
   at Microsoft.Exchange.MailboxTransport.StoreDriverCommon.StorageExceptionHandler.RunUnderTableBasedExceptionHandler(IMessageConverter converter, StoreDriverDelegate workerFunction).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange Store Driver Submission" />
    <EventID Qualifiers="49156">1012</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-12-19T14:24:04.000000000Z" />
    <EventRecordID>37017884</EventRecordID>
    <Channel>Application</Channel>
    <Computer>exchange2013.fnbwalker.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>1210627934</Data>
    <Data>279349c9-c857-480c-ba8d-cdb6cd29ed8e</Data>
    <Data>6624b063-c0ca-4c73-af18-2735d56c7d96</Data>
    <Data>Microsoft.Exchange.MailboxTransport.StoreDriverCommon.InvalidSenderException
   at Microsoft.Exchange.MailboxTransport.Shared.SubmissionItem.SubmissionItemUtils.CopySenderTo(SubmissionItemBase submissionItem, TransportMailItem message)
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.GenerateNdrMailItem()
   at Microsoft.Exchange.MailboxTransport.Submission.StoreDriverSubmission.MailItemSubmitter.&lt;&gt;c__DisplayClass1.&lt;FailedSubmissionNdrWorker&gt;b__0()
   at Microsoft.Exchange.MailboxTransport.StoreDriverCommon.StorageExceptionHandler.RunUnderTableBasedExceptionHandler(IMessageConverter converter, StoreDriverDelegate workerFunction)</Data>
  </EventData>
</Event>

Thanks for the help with this after I mounted the DB the truncating started to function correctly..