NonServiceImpacting: Exchange falhou ao gravar os logs devido a um erro. O componente de origem e a causa do erro estão especificadas na descrição do evento.

_4177B349_28AB_4461_8DF8_C9FEBB1B040A_.RaiseAlert (Rule)

Knowledge Base article:

Fontes de Conhecimento Externas

Para mais informações, consulte o tópico respectivo em Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.SystemCenter.RootManagementServer
CategoryAlert
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DataSource DataSource Microsoft.SystemCenter.SdkEventProvider Default
ConditionDetection ConditionDetection System.ExpressionFilter Default
WriteAction WriteAction Microsoft.Exchange.2010.GenerateAlertFromSdkEvent Default

Source Code:

<Rule ID="_4177B349_28AB_4461_8DF8_C9FEBB1B040A_.RaiseAlert" Enabled="true" Target="SC!Microsoft.SystemCenter.RootManagementServer" ConfirmDelivery="false">
<Category>Alert</Category>
<DataSources>
<DataSource TypeID="SC!Microsoft.SystemCenter.SdkEventProvider" ID="DataSource"/>
</DataSources>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="ConditionDetection">
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>500</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">_4177B349_28AB_4461_8DF8_C9FEBB1B040A_</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction TypeID="Microsoft.Exchange.2010.GenerateAlertFromSdkEvent" ID="WriteAction">
<Priority>$Data/EventData/CorrelatedContext/RootCause/Priority$</Priority>
<Severity>$Data/EventData/CorrelatedContext/RootCause/Severity$</Severity>
<AlertName>$Data/EventData/CorrelatedContext/RootCause/AlertName$</AlertName>
<AlertDescription>$Data/EventData/CorrelatedContext/DescriptionText$</AlertDescription>
<AlertMessageId>$MPElement[Name="_4177B349_28AB_4461_8DF8_C9FEBB1B040A_.AlertName"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventData/CorrelatedContext/DescriptionText$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventNumber$</SuppressionValue>
<SuppressionValue>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
<WorkflowId>$MPElement$</WorkflowId>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5>$Data/EventData/CorrelatedContext/RootCause/MonitorType$</Custom5>
<Custom6>$Data/EventData/CorrelatedContext/RootCause/EscalationTeam$</Custom6>
<Custom7>$Data/EventData/CorrelatedContext/RootCause/Actionable$</Custom7>
<Custom8>$Data/EventData/CorrelatedContext/RootCause/Urgent$</Custom8>
<Custom9/>
<Custom10>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</Custom10>
</WriteAction>
</WriteActions>
</Rule>