KHI: The Microsoft Exchange Transport Log Search Service failed to start due to an ACL setup error.

_DD81E7B7_D948_411A_B86B_1769D961577A_ (UnitMonitor)

Knowledge Base article:

External Knowledge Sources

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange.2010.CommonTransportLogSearch
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeCorrelation.StatefulWindowsEventTimerMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault
CommentEscalationTeam='Transport'

Source Code:

<UnitMonitor ID="_DD81E7B7_D948_411A_B86B_1769D961577A_" Enabled="onEssentialMonitoring" Target="Microsoft.Exchange.2010.CommonTransportLogSearch" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Accessibility="Public" TypeID="Correlation.StatefulWindowsEventTimerMonitorType" Comment="EscalationTeam='Transport'">
<Category>AvailabilityHealth</Category>
<OperationalStates>
<OperationalState ID="Success" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
<OperationalState ID="Error" MonitorTypeStateID="EventRaised" HealthState="Error"/>
</OperationalStates>
<Configuration>
<MonitorType>KHI</MonitorType>
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7015</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">MSExchangeTransportLogSearch</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
<TimerWaitInSeconds>86400</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>