The time stamp for the restored log file does not match the time stamp recorded in the previous log file. Log files may have been manually deleted or sequence otherwise invalidated. Examine log file headers.

Microsoft.Exchange2007.Ese.ESE.434 (Rule)

Knowledge Base article:

External

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange2007.Component.Ese
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
The time stamp for the restored log file does not match the time stamp recorded in the previous log file. Log files may have been manually deleted or sequence otherwise invalidated. Examine log file headers.
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Exchange2007.Application.FilteredEventProvider.DS Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Exchange2007.Ese.ESE.434" Enabled="onEssentialMonitoring" Target="ExLibrary!Microsoft.Exchange2007.Component.Ese" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Exchange2007.Application.FilteredEventProvider.DS">
<EventSourceName>ESE</EventSourceName>
<EventDisplayNumber>434</EventDisplayNumber>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Microsoft.Exchange2007.Ese.ESE.434.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>