The mail flow latency has exceeded the specified threshold.
In general, this event indicates a problem that was already resolved, because the latency is established after the message is delivered to its destination. If this is the case, ignore this alert.
High traffic on network.
Large mail queue being processed or building up.
Exchange server is low on system resources (such as processor, physical memory or disk I/O).
Verify the following items to resolve this problem:
Ensure that there are no network-related problems.
If there are large delivery queues, then ensure they are emptying.
Verify that the load on the server is not at or over the planned capacity.
Change the current latency threshold to match your requirements.
For more information on how to configure this threshold, see knowledge associated with the Mail Flow Receiver Monitor.
| Target | Microsoft.Exchange.SyntheticTransaction.Mailflow | ||
| Category | EventCollection | ||
| Enabled | True | ||
| Alert Generate | True | ||
| Alert Severity | Warning | ||
| Alert Priority | Normal | ||
| Remotable | True | ||
| Alert Message |
| ||
| Event Log | Operations Manager |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| EventDS | DataSource | Microsoft.Windows.EventProvider | Default |
| GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
Home
<Rule ID="Mail_flow_latency_exceeded_the_specified_threshold" Enabled="onStandardMonitoring" Target="Exch2003Core!Microsoft.Exchange.SyntheticTransaction.Mailflow" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Exchange MOM - MFR</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">9564</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Mail_flow_latency_exceeded_the_specified_threshold.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>