Home
  •  

KHI: MSExchangeTransport process is repeatedly crashing in last 45 minutes.

_2C080397_CE3C_4d05_9C37_E378AF622BF7_ (UnitMonitor)

Knowledge Base article:

External Knowledge Sources

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange.2010.HubTransportServiceMonitoring
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeCorrelation.StatefulWindowsRepeatedEventsMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault
CommentEscalationTeam='Transport'

Source Code:

<UnitMonitor ID="_2C080397_CE3C_4d05_9C37_E378AF622BF7_" Target="Microsoft.Exchange.2010.HubTransportServiceMonitoring" Enabled="onEssentialMonitoring" Accessibility="Public" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" TypeID="Correlation.StatefulWindowsRepeatedEventsMonitorType" Comment="EscalationTeam='Transport'">

  <Category>AvailabilityHealth</Category>

  <OperationalStates>

    <OperationalState ID="OperationalGoodState" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

    <OperationalState ID="OperationalProblemState" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <MonitorType>KHI</MonitorType>

    <TimeWindowInSeconds>2700</TimeWindowInSeconds>

    <RepeatThreshold>3</RepeatThreshold>

    <FirstComputerName>.</FirstComputerName>

    <FirstLogName>Application</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">4999</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">MSExchange Common</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[5]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">MSExchangeTransport</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>.</SecondComputerName>

    <SecondLogName>Application</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">12029</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">MSExchangeTransport</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>