SMTP messages archived lower threshold

Veritas.EnterpriseVault.12.SMTPMessagesArchived.LowerThreshold.Rule (Rule)

Collects SMTP Archiving task performance data and generates an alert if too few messages are archived.

Knowledge Base article:

Causes

Either the Enterprise Vault SMTP Archiving task is not processing email messages, or the Enterprise Vault SMTP service is receiving fewer email messages.

Resolutions

Start the SMTP Archiving task, if it has been stopped.

If the Enterprise Vault SMTP service is receiving only a small number of email messages, then check the distribution of email traffic across the configured Enterprise Vault SMTP servers.

If the configuration is correct you can set a lower threshold value for the rule.

Element properties:

TargetVeritas.EnterpriseVault.12.SMTPArchivingTask
CategoryCustom
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource System.Performance.DeltaDataProvider Veritas.EnterpriseVault.MonitoringProfile
CD ConditionDetection System.Performance.SimpleThresholdCondition Veritas.EnterpriseVault.MonitoringProfile
Alert WriteAction System.Health.GenerateAlert Veritas.EnterpriseVault.MonitoringProfile

Source Code:

<Rule ID="Veritas.EnterpriseVault.12.SMTPMessagesArchived.LowerThreshold.Rule" Target="Veritas.EnterpriseVault.12.SMTPArchivingTask" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Custom</Category>
<DataSources>
<DataSource ID="DS" TypeID="Perf!System.Performance.DeltaDataProvider" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">
<ComputerName>$Target/Host/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>SMTP messages archived</CounterName>
<ObjectName>Enterprise Vault SMTP Archiving Task</ObjectName>
<InstanceName>$Target/Property[Type="Veritas.EnterpriseVault.12.Task"]/Name$</InstanceName>
<Frequency>86400</Frequency>
<NumSamples>1</NumSamples>
</DataSource>
</DataSources>
<ConditionDetection ID="CD" TypeID="Perf!System.Performance.SimpleThresholdCondition" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">
<Threshold>1000</Threshold>
<Operator>Less</Operator>
</ConditionDetection>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertName>SMTP messages archived lower threshold error</AlertName>
<AlertDescription>Lower threshold of SMTP message archiving has been crossed. Number of SMTP messages archived: $Data/Value$</AlertDescription>
</WriteAction>
</WriteActions>
</Rule>