KHI: An Exchange certificate has expired or will expire very soon. Immediate action is required.

_4FBDF2BC_F185_43b1_9040_1D7ECC4C4123_ (UnitMonitor)

Knowledge Base article:

External Knowledge Sources

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange.2010.ClientAccessWebServices
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeCorrelation.StatefulWindowsEventTimerMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault
CommentEscalationTeam='Web Services'

Source Code:

<UnitMonitor ID="_4FBDF2BC_F185_43b1_9040_1D7ECC4C4123_" Enabled="onEssentialMonitoring" Target="Microsoft.Exchange.2010.ClientAccessWebServices" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Accessibility="Public" TypeID="Correlation.StatefulWindowsEventTimerMonitorType" Comment="EscalationTeam='Web Services'">
<Category>AvailabilityHealth</Category>
<OperationalStates>
<OperationalState ID="Success" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
<OperationalState ID="Warning" MonitorTypeStateID="EventRaised" HealthState="Warning"/>
</OperationalStates>
<Configuration>
<MonitorType>KHI</MonitorType>
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(24|25)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">MSExchange Web Services</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
<TimerWaitInSeconds>259200</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>