KHI: The Microsoft Exchange Transport Log Search service failed to read configuration from Active Directory.

_B048F00C_2099_49E1_91B5_88221308B369_ (UnitMonitor)

Knowledge Base article:

External Knowledge Sources

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange.2010.CommonTransportLogSearch
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeCorrelation.StatefulWindowsEventTimerMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault
CommentEscalationTeam='Transport'

Source Code:

<UnitMonitor ID="_B048F00C_2099_49E1_91B5_88221308B369_" Enabled="onEssentialMonitoring" Target="Microsoft.Exchange.2010.CommonTransportLogSearch" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Accessibility="Public" TypeID="Correlation.StatefulWindowsEventTimerMonitorType" Comment="EscalationTeam='Transport'">
<Category>AvailabilityHealth</Category>
<OperationalStates>
<OperationalState ID="Success" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
<OperationalState ID="Warning" MonitorTypeStateID="EventRaised" HealthState="Warning"/>
</OperationalStates>
<Configuration>
<MonitorType>KHI</MonitorType>
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7005</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">MSExchangeTransportLogSearch</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
<TimerWaitInSeconds>86400</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>