Transport Log Search Service Monitor

Microsoft.Exchange2007.Mailbox.ServiceMonitor.MSExchangeTransportLogSearch (UnitMonitor)

This service provides remote search capability for Microsoft Exchange Transport log files. This is for mailbox servers.

Knowledge Base article:

Summary

This monitor uses Windows Management Instrumentation (WMI) to check the status of the Transport Log Search service and generates an alert when the service is set to start automatically and is not running.

Note that an alert is not generated when the service is disabled and a healthy state will be shown.

Causes

A service can stop for many reasons, including:

Resolutions

You can attempt to restart the service using the following link:

Start Transport Log Search service

Element properties:

TargetMicrosoft.Exchange2007.ServerRole.Mailbox
Parent MonitorMicrosoft.Exchange2007.Mailbox.AggregateMonitor.CoreServices
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.CheckNTServiceStateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Transport Log Search Service Stopped
The Transport Log Search Service on Exchange server {0} has stopped running
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Exchange2007.Mailbox.ServiceMonitor.MSExchangeTransportLogSearch" Accessibility="Public" Enabled="onEssentialMonitoring" Target="ExLibrary!Microsoft.Exchange2007.ServerRole.Mailbox" ParentMonitorID="Microsoft.Exchange2007.Mailbox.AggregateMonitor.CoreServices" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="true">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.Exchange2007.Mailbox.ServiceMonitor.MSExchangeTransportLogSearch.AlertMessage">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success"/>
<OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<ServiceName>MSExchangeTransportLogSearch</ServiceName>
<CheckStartupType>false</CheckStartupType>
</Configuration>
</UnitMonitor>