ScanTransportTimeoutE

ScanTransportTimeoutE_1_Rule (Rule)

Knowledge Base article:

Riepilogo

Il processo di analisi trasporto ha superato il limite di tempo consentito per una determinata attività di analisi. Un'azione di timeout determina il ricaricamento del processo di analisi trasporto.

Cause

1. File particolarmente grandi o con un elevato rapporto di compressione che richiedono un'attività di analisi molto prolungata.

2. File che fanno bloccare un determinato motore di analisi durante l'esecuzione dell'analisi.

Soluzioni

Il ripristino da questa situazione è automatico. Se tuttavia questo tipo di evento si verifica frequentemente, è consigliabile contattare il supporto tecnico Microsoft.

Element properties:

TargetFSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation
CategoryEventCollection
EnabledTrue
Event_ID5015
Event SourceFSCController
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
ScanTransportTimeoutE
Event LogApplication
CommentMom2005ID='{2E3F1613-B768-4C9C-A881-0F23B1A07C77}';MOM2005ComputerGroupID={349CABD5-7700-4732-962C-63CF8C1B3795}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="ScanTransportTimeoutE_1_Rule" Comment="Mom2005ID='{2E3F1613-B768-4C9C-A881-0F23B1A07C77}';MOM2005ComputerGroupID={349CABD5-7700-4732-962C-63CF8C1B3795}" Enabled="true" Target="FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>5015</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>FSCController</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="HealthLibrary!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="ScanTransportTimeoutE_1_Rule.AlertMessage"]$</AlertMessageId>
<AlertParameters/>
<Suppression/>
<Custom1>Microsoft Forefront Server Security</Custom1>
<Custom2>Forefront Security for Exchange Server</Custom2>
<Custom3>ScanJobFailure</Custom3>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>