Home
  •  

SMTP messages archived higher threshold

Veritas.EnterpriseVault.12.SMTPMessagesArchived.HigherThreshold.Rule (Rule)

Monitors SMTP Archiving task performance data and generates an alert if the task is archiving more messages than expected.

Knowledge Base article:

Causes

The SMTP Archiving task is archiving more email messages than expected.

Resolutions

If you see this alert frequently, it is likely that there has been a general increase in the number of email messages received by the Enterprise Vault SMTP service. Check the distribution of email traffic across the configured Enterprise Vault SMTP servers.

If the configuration is correct you can set a higher threshold value for the rule.

Element properties:

TargetVeritas.EnterpriseVault.12.SMTPArchivingTask
CategoryCustom
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource System.Performance.DeltaDataProvider Veritas.EnterpriseVault.MonitoringProfile
CD ConditionDetection System.Performance.SimpleThresholdCondition Veritas.EnterpriseVault.MonitoringProfile
Alert WriteAction System.Health.GenerateAlert Veritas.EnterpriseVault.MonitoringProfile

Source Code:

<Rule ID="Veritas.EnterpriseVault.12.SMTPMessagesArchived.HigherThreshold.Rule" Target="Veritas.EnterpriseVault.12.SMTPArchivingTask" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Perf!System.Performance.DeltaDataProvider" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">

      <ComputerName>$Target/Host/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>SMTP messages archived</CounterName>

      <ObjectName>Enterprise Vault SMTP Archiving Task</ObjectName>

      <InstanceName>$Target/Property[Type="Veritas.EnterpriseVault.12.Task"]/Name$</InstanceName>

      <Frequency>86400</Frequency>

      <NumSamples>1</NumSamples>

    </DataSource>

  </DataSources>

  <ConditionDetection ID="CD" TypeID="Perf!System.Performance.SimpleThresholdCondition" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">

    <Threshold>100000</Threshold>

    <Operator>Greater</Operator>

  </ConditionDetection>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName>SMTP messages archived higher threshold error</AlertName>

      <AlertDescription>Higher threshold of SMTP message archiving has been crossed. Number of SMTP messages archived: $Data/Value$</AlertDescription>

    </WriteAction>

  </WriteActions>

</Rule>