Home
  •  

All Unit Monitors in Microsoft.Exchange.2010 Management Pack

 DisplayNameDescriptionIDTargetParent MonitorCategoryEnabledInstance NameCounter NameFrequencyAlert GenerateAlert SeverityAlert PriorityAlert Auto ResolveMonitor TypeRemotableAccessibilityRunAs
ExchangeRequiredHotfixesNotInstalledThe required SCOM hotfixes for Exchange MP are not installed.ExchangeRequiredHotfixesNotInstalledMicrosoft.SystemCenter.HealthServiceSystem.Health.AvailabilityStateCustomTrue0TrueErrorNormalTrueMicrosoft.Windows.TimedScript.TwoStateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessActiveSync.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessFileDistributionService.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessFileDistributionService.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessFileDistributionServiceMicrosoft.Exchange.2010.ClientAccessFileDistributionService.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessImap4.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessImap4.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessInformationWorker.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessOutlookDirectory.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessOutlookDirectory.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessOutlookDirectoryMicrosoft.Exchange.2010.ClientAccessOutlookDirectory.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessPop3.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessPop3.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessTestConfig.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessTestConfig.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessTestConfigMicrosoft.Exchange.2010.ClientAccessTestConfig.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessWebServices.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessWebServices.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonAllServerRoles.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonAllServerRoles.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonDomainController.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonDomainController.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonFileDistributionService.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonServer.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonServer.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonServerMicrosoft.Exchange.2010.CommonServer.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonTransport.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonTransport.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonTransport.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonTransportAgents.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonTransportAgents.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.CommonTransportLogSearch.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonTransportLogSearchMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.EdgeTransportAgentsAddressRewrite.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.EdgeTransportAgentsAddressRewrite.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.EdgeTransportAgentsAddressRewriteMicrosoft.Exchange.2010.EdgeTransportAgentsAddressRewrite.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.EdgeTransportAgentsAttachmentFilter.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.EdgeTransportAgentsAttachmentFilter.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.EdgeTransportAgentsAttachmentFilterMicrosoft.Exchange.2010.EdgeTransportAgentsAttachmentFilter.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.EdgeTransportDsn.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.EdgeTransportDsn.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.EdgeTransportDsnMicrosoft.Exchange.2010.EdgeTransportDsn.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.EdgeTransportQueues.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportAgentsMessagingPolicies.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportDsn.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportDsn.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportDsnMicrosoft.Exchange.2010.HubTransportDsn.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportEdgeSync.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportQueues.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportQueues.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.HubTransportStoreDriver.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.AcrossCluster.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.AcrossClusterMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.ContentIndexingServiceMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchableMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.InformationStore.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.InformationStore.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.InformationStoreMicrosoft.Exchange.2010.Mailbox.InformationStore.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.MailboxMonitoring.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.MailboxMonitoring.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.MailboxMonitoringMicrosoft.Exchange.2010.Mailbox.MailboxMonitoring.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopy.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.MailboxOnDbCopy.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.MailboxOnDbCopyMicrosoft.Exchange.2010.Mailbox.MailboxOnDbCopy.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.MailSubmission.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.PublicFolderDatabase.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabase.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabase.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpace.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpace.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpace.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpace.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpace.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpace.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.MailboxSystemAttendant.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.MailboxTestConfig.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.MailboxTestConfig.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MailboxTestConfigMicrosoft.Exchange.2010.MailboxTestConfig.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.MonitoringCorrelationEngine.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
Microsoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTrueInternal
MSExchangeMonitoringCorrelationNotRunningThe Microsoft Exchange Monitoring Correlation service (MSExchangeMonitoringCorrelation) is not running.MSExchangeMonitoringCorrelationNotRunningMicrosoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0TrueMatchMonitorHealthNormalTrueMicrosoft.Windows.CheckNTServiceStateMonitorTypeTruePublic
_004C6F78_DCEA_4df7_82C1_F5A7B04E1FF6_KHI: An IMAP4 connectivity transaction failure occurred. The mailbox database isn't unique._004C6F78_DCEA_4df7_82C1_F5A7B04E1FF6_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_005FE946_0C54_43EA_AF36_5DD3056185E8_Forensic: The path to the location for the protocol logging for Receive connectors hasn't been set, so the existing path will be used._005FE946_0C54_43EA_AF36_5DD3056185E8_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0074C3C8_A6E4_49e6_A67F_5ED6A2BE016D_KHI: Content Aggregation Subscription Dispatch Submission Failures - increase over 3 hours - Red(>1000)._0074C3C8_A6E4_49e6_A67F_5ED6A2BE016D_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTrueInternal
_0079b07e_8b0e_43c7_85a4_ac3ddee70b90_KHI: Didn't recover a database failure of a replicated database because the attempted failover failed._0079b07e_8b0e_43c7_85a4_ac3ddee70b90_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_00AA4472_73F8_41DD_8BD7_BBBA48432044_Forensic: Exchange was unable to create the Routing Table log file or directory._00AA4472_73F8_41DD_8BD7_BBBA48432044_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_00E61208_49F1_491e_84AD_C4B00C6D7882_KHI: The Microsoft Exchange Replication service (continuous replication service) is consuming excessive memory._00E61208_49F1_491e_84AD_C4B00C6D7882_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_00F078F7_9F78_4EDC_A2C9_4E440C2D2203_Forensic: The Content Filter agent process isn't responding. Exchange is unable to scan the message._00F078F7_9F78_4EDC_A2C9_4E440C2D2203_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_010A8B1D_F085_482f_8B1B_2DA8815C7CD5_Forensic: MSExchangeOABGEN: \% of Uptime in OABGEN - sustained for 72 hours - Yellow(>50)._010A8B1D_F085_482f_8B1B_2DA8815C7CD5_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_01940C47_6D13_46A7_99CE_F480A639DB75_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 6 for the cause._01940C47_6D13_46A7_99CE_F480A639DB75_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_019EC805_7FE6_4F51_B3AD_63873754FCF1_KHI: System Attendant requires the ABV DG dll for offline address book generation but it cannot be loaded._019EC805_7FE6_4F51_B3AD_63873754FCF1_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_023E2388_0455_48BD_AA1F_3CB93F73FBA4_Forensic: Outlook Web App failed to parse the Address Book custom properties._023E2388_0455_48BD_AA1F_3CB93F73FBA4_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_024751f9_0c8e_4787_9151_edb0a2fd7996_Forensic: EdgeSync encountered a permanent error when synchronizing an address to MSERV._024751f9_0c8e_4787_9151_edb0a2fd7996_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_025D1F2A_1DAF_46B6_9AEF_66AB5D2131AD_Forensic: Exchange couldn't get the SID for an account. The Exchange Active Directory Topology service will continue starting with limited permissions._025D1F2A_1DAF_46B6_9AEF_66AB5D2131AD_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_026E0E71_A5B3_4781_8FBA_E29D7FC4225D_KHI: Retry Remote Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport._026E0E71_A5B3_4781_8FBA_E29D7FC4225D_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_028fe911_5c8f_44e9_8f4c_b6be88969139_KHI: The server is having difficulty becoming an active member of its database availability group._028fe911_5c8f_44e9_8f4c_b6be88969139_Microsoft.Exchange.2010.Mailbox.ClusterServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_033e8055_4533_49c1_a07f_30ef364551c8_KHI: The Microsoft Exchange RPC Client Access Service (MSExchangeRPC) isn't running._033e8055_4533_49c1_a07f_30ef364551c8_Microsoft.Exchange.2010.CommonMSExchangeRPCServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_035DE000_CD1C_4789_9E91_229192B4C7B3_KHI: Outlook Web App failed to initialize. No default theme was found. Review MSExchangeOWA event 26 for the cause._035DE000_CD1C_4789_9E91_229192B4C7B3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_038E817E_EDEA_4568_9B0A_BD88431AA077_Forensic: An exception occurred while attempting to locate a Client Access server to handle the request._038E817E_EDEA_4568_9B0A_BD88431AA077_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_03BC2341_139C_4983_A449_1B69E0E6798F_KHI: Outlook Web App failed to initialize. A required small icon configuration file doesn't exist._03BC2341_139C_4983_A449_1B69E0E6798F_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_03E71243_0AFE_4456_AEEB_E2BEB3100821_Forensic: No route has been created for this Public Folder Hierarchy in the routing tables._03E71243_0AFE_4456_AEEB_E2BEB3100821_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_04585F0D_1045_489F_98F3_1A05E451E230_KHI: The Test-ECPConnectivity (Internal) diagnostic cmdlet failed to run._04585F0D_1045_489F_98F3_1A05E451E230_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_0475B448_0B3F_449D_A504_D7FC00EA4E15_Forensic: Outlook Web App failed to read the configuration settings from Active Directory for one of its virtual directories._0475B448_0B3F_449D_A504_D7FC00EA4E15_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_04808693_E6DF_4E7D_B5C3_57ADA1F46DB4_Forensic: Couldn't find the local server. Exchange can't update the Active Directory Lightweight Directory Services (AD LDS) credentials._04808693_E6DF_4E7D_B5C3_57ADA1F46DB4_Microsoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_04982720_F096_4718_A7DB_8A5F49EBCBA9_KHI: Initialization of outbound authentication failed with the specified error for the Send connector._04982720_F096_4718_A7DB_8A5F49EBCBA9_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_04d848a6_3c0d_49f7_9ed6_1423e7000cbc_Forensic: Test-ExchangeSearch created an item in a mailbox on database and then indexed it. The subsequent search for the item failed._04d848a6_3c0d_49f7_9ed6_1423e7000cbc_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ExchangeSearch_cmdlet.FalseInternal
_04F073C8_C737_497d_B134_E61A7AC0338C_Forensic: Exchange couldn't authenticate to the Active Directory Rights Management Services (AD RMS) server. Contact the AD RMS administrator for assistance._04F073C8_C737_497d_B134_E61A7AC0338C_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_05A83CAE_D1C4_400C_8F3D_E990BCCEB6B8_Forensic: Outlook Web App failed to parse the Address Book custom properties._05A83CAE_D1C4_400C_8F3D_E990BCCEB6B8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_05F5FD48_4B07_475A_9535_E9B47D74B449_Forensic: Didn't find suitable domain controllers in local site. Check that you configured enough global catalogs. Check the Application log for ADAccess events._05F5FD48_4B07_475A_9535_E9B47D74B449_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_061BBE45_4889_45A6_A2D6_A70EB6921240_Forensic: Name Service Provider Interface (NSPI) Proxy encountered an error while sending a packet._061BBE45_4889_45A6_A2D6_A70EB6921240_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_062c6ad6_7f15_446d_8337_c231ee193127_KHI: A mailbox on this database has been quarantined._062c6ad6_7f15_446d_8337_c231ee193127_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_0660514c_bc16_4770_b43f_ae60dc5cd8d5_KHI: The Exchange store encountered a stack overflow._0660514c_bc16_4770_b43f_ae60dc5cd8d5_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_06973F27_B9A1_4BE7_A312_A75759447812_Forensic: The Availability service wasn't able to log on as the network service context for proxying requests._06973F27_B9A1_4BE7_A312_A75759447812_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_06C2CA66_F320_4576_8FD2_3DE05742A109_KHI: Disk \% Free Space low - Red(<10\%)._06C2CA66_F320_4576_8FD2_3DE05742A109_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_06D93572_F119_4992_A510_AD212A7536BA_KHI: Outlook Web App failed to initialize. A referenced forms registry folder doesn't exist. Review MSExchangeOWA event 2 for the cause._06D93572_F119_4992_A510_AD212A7536BA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_071afc0e_2643_4daa_af18_56d8c730d212_KHI: The database copy is experiencing an unusually high log generation rate (bytes written/second) for a sustained period of at least 15 minutes._071afc0e_2643_4daa_af18_56d8c730d212_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_0723763E_2A8B_4204_9B84_0864D8BB307A_KHI: The Outlook Web App proxy or redirection failed because one of the service discovery entries isn't valid._0723763E_2A8B_4204_9B84_0864D8BB307A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_07842286_170a_45e9_b113_d02979ad3012_KHI: MSExchange Mailbox Replication service is not responding to RPC/WCF ping._07842286_170a_45e9_b113_d02979ad3012_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_07F74BE9_F036_4A24_8DA7_FB3614DBCC8A_NonServiceImpacting: The internal Web Services connectivity transaction failed. The Test-WebServicesConnectivity cmdlet must be run on a Client Access server._07F74BE9_F036_4A24_8DA7_FB3614DBCC8A_Microsoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_083326D9_B48D_448c_8B9F_685A9D026B18_KHI: Invalid Account Credentials/Unable to Authenticate_083326D9_B48D_448c_8B9F_685A9D026B18_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_087E4F30_910D_44CA_91E3_E9D766A1AC2D_Forensic: A configuration update occurred, but the internal cache failed to load. The existing configuration will be retained._087E4F30_910D_44CA_91E3_E9D766A1AC2D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_08a962f8_b776_4b5c_afa4_4b3eb505e4b6_KHI: The mounted database copy is experiencing a critically high database read latency. The rate is sustained for at least 5 minutes._08a962f8_b776_4b5c_afa4_4b3eb505e4b6_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_08C092E8_FD6F_48b2_BA1E_473C3B84A2F3_KHI: Indexing Stalled: Time Since Last Notification Was Indexed (>1hr behind for 30min)._08C092E8_FD6F_48b2_BA1E_473C3B84A2F3_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_08F29081_008F_4a49_A9DA_FB1BE58AC92E_KHI: LDAP Disconnects per minute - sustained for 5 minutes - Red(>10)._08F29081_008F_4a49_A9DA_FB1BE58AC92E_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_08FF3D95_1008_41ED_B445_EA60E1E732A0_KHI: The agent encountered a problem when trying to load the file that lists the supported mobile operators and their capabilities._08FF3D95_1008_41ED_B445_EA60E1E732A0_Microsoft.Exchange.2010.HubTransportAgentsSMSSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_09A36DA2_126A_47cf_BDA7_F80022305B5E_KHI: The Transport queue database is experiencing an unusually high log generation checkpoint depth over last 15 min - Yellow(>400)._09A36DA2_126A_47cf_BDA7_F80022305B5E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_09A5E870_C3E5_4052_AB66_47C194F0C419_KHI: Exchange couldn't read the Receive connector configuration so the service will be stopped._09A5E870_C3E5_4052_AB66_47C194F0C419_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_09c7e43d_4aba_41f8_9079_3882b0cf7d7f_KHI: Querying taking too long: Exchange Search Slow First Batch is over 10._09c7e43d_4aba_41f8_9079_3882b0cf7d7f_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_09DF01C7_9631_4AEA_B412_CA527D9F4ADC_KHI: The service could not be initialized because the necessary entry point could not be found._09DF01C7_9631_4AEA_B412_CA527D9F4ADC_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0A52A377_60C4_463C_98A3_DC4B52324C41_KHI: MSExchangeFDS:OAB: Download Tasks Queued - sustained for 10 hours - Red (>10)._0A52A377_60C4_463C_98A3_DC4B52324C41_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_0a64f4a7_54ff_4d95_ab0b_4fbd7db0947d_KHI: EdgeSync MSERV synchronization failures._0a64f4a7_54ff_4d95_ab0b_4fbd7db0947d_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_FalseInternal
_0AB3C47D_926F_46E8_ACA2_81BEEAB00A4E_KHI: The Outlook Web App proxy failed because it couldn't find a trusted certificate for SSL encryption._0AB3C47D_926F_46E8_ACA2_81BEEAB00A4E_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0B028CA4_0568_45e7_8393_865A648C44E1_Forensic: Transport latency impacted - SMTP Send for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._0B028CA4_0568_45e7_8393_865A648C44E1_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_0B505ABC_05BA_4185_B6C1_A9DBC1ADE905_KHI: Exchange was unable to quarantine a message because the spam quarantine mailbox is invalid. Please configure the quarantine mailbox._0B505ABC_05BA_4185_B6C1_A9DBC1ADE905_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0b531ab6_b00c_4930_b4b7_ae87f7478d6c_KHI: A failure that may impact all copies of a database was detected; the copy terminate replication or dismount._0b531ab6_b00c_4930_b4b7_ae87f7478d6c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_0BEBFB6E_D773_4FFF_BF0F_6E0A4AF4ED61_Forensic: No global catalog server was found in the local site. Make sure that the local site has enough global catalog servers for Exchange._0BEBFB6E_D773_4FFF_BF0F_6E0A4AF4ED61_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0D4183C4_7273_4EFC_89D0_380325C048E2_Forensic: A setting in the Web.Config file was not valid and has been reset to the default value._0D4183C4_7273_4EFC_89D0_380325C048E2_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0d663de8_af2f_4b56_8ba9_1bc18527f6a2_Forensic: EdgeSync Enterprise synchronization warnings._0d663de8_af2f_4b56_8ba9_1bc18527f6a2_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSynchronization_diagnostic_cmdlet._Report_Collection_FalseInternal
_0D9C769B_2240_4A07_8170_EBA3C030B110_Forensic: The removal of privileges from a process failed with an error code. The process and error code are specified in the event description._0D9C769B_2240_4A07_8170_EBA3C030B110_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0DE7EDC6_2064_496b_92FA_56446759D85A_Forensic: Exchange Control Panel failed to find a Client Access server in the same site as a user's mailbox. Review MSExchange Control Panel event 22 for the cause._0DE7EDC6_2064_496b_92FA_56446759D85A_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0E58176D_CE7F_4BCF_B852_803AA2FC9953_Forensic: Name Server Provider Interface (NSPI) Proxy listener thread could not connect to the server on transport. The Winsock subsystem returned an error._0E58176D_CE7F_4BCF_B852_803AA2FC9953_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0f17e558_a24f_443d_9960_8d9e2b4b0dca_KHI: Federated Delivery Encryption agent can't get delegation token from Windows Live. Outbound messages to Outlook Live affected until issue resolved._0f17e558_a24f_443d_9960_8d9e2b4b0dca_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0F414B81_91AC_4B7C_B1E4_9E07EAC508D1_KHI: Couldn't initialize the Content Filter agent because a required file couldn't be found on your system._0F414B81_91AC_4B7C_B1E4_9E07EAC508D1_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0F5868CB_638D_4600_BE92_1F0074A3E00F_KHI: Required log file is missing on the active copy; continuous replication for this database is blocked._0F5868CB_638D_4600_BE92_1F0074A3E00F_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_0F6A777B_970D_4fbe_98A8_FAFDEC0990CC_KHI: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility._0F6A777B_970D_4fbe_98A8_FAFDEC0990CC_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0F7B2B1B_2476_41DC_89E5_00873795693A_Forensic: LDAP Search Time - sustained for 5 minutes - Yellow(>50msec)._0F7B2B1B_2476_41DC_89E5_00873795693A_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_0F8010BB_CD60_40e2_8DEA_EAE9839CEFB3_Forensic: The cmdlet that Exchange Control Panel requires to determine an RBAC role returned an error. MSExchange Control Panel event 31._0F8010BB_CD60_40e2_8DEA_EAE9839CEFB3_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_0fdc40b1_6cc3_4385_8d7e_084b3c10a40c_KHI: Unable to initialize the Exchange store due to the clocks on the client and server not being synchronized._0fdc40b1_6cc3_4385_8d7e_084b3c10a40c_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_10058a4d_73df_47ca_89b1_e13a45b9ea23_Forensic: Mail submission is not keeping up with the work being presented by the changes to the locally mounted databases._10058a4d_73df_47ca_89b1_e13a45b9ea23_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_102f42a5_da66_4792_b71b_8d8aeef944cb_Forensic: The server is a member of a database availability group and other servers are currently not operational._102f42a5_da66_4792_b71b_8d8aeef944cb_Microsoft.Exchange.2010.Mailbox.AcrossClusterMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_10545155_FC9E_4430_A397_B2A3ADCED18F_Forensic: A message could not be sent to the Content Filter wrapper because of an error. The message is being rejected._10545155_FC9E_4430_A397_B2A3ADCED18F_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_108E4F87_A860_4650_86DB_48E4FF303874_KHI: System Attendant failed to read the membership of the universal security group._108E4F87_A860_4650_86DB_48E4FF303874_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_10a2b32c_b844_44f1_b750_d5150e0b249c_KHI: The database copy is low on log volume space. The volume has reached critical levels (15\% free)._10a2b32c_b844_44f1_b750_d5150e0b249c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_10EC3C58_9362_4B84_B465_B58C92437E99_Forensic: An error occurred while sending the shutdown message to the Content Filter wrapper process._10EC3C58_9362_4B84_B465_B58C92437E99_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1180CC57_5069_4D51_B4D0_5BE9681E8D0F_Forensic: Aggregate Delivery Queue Length (All Queues) - sustained for 5 minutes - Red(>5000) - Edge Transport._1180CC57_5069_4D51_B4D0_5BE9681E8D0F_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_11A19FCF_E4B0_4FEF_A733_0BBC7FE90278_KHI: A transport rules agent failed to create an agent instance._11A19FCF_E4B0_4FEF_A733_0BBC7FE90278_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_11e5fc9c_366e_4b85_aa75_6cb7f73034bb_KHI: Low or out of disk space will dismount or terminate replication on a database copy._11e5fc9c_366e_4b85_aa75_6cb7f73034bb_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_12682d82_4fe5_409e_80c5_ae940460be66_KHI: A user mailbox has hit recoverable items quota limit._12682d82_4fe5_409e_80c5_ae940460be66_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_12907C37_F3FC_4aa7_9FBB_CF4F31A93B97_KHI: Aggregate Delivery Queue Length (All Queues) - sustained for 15 minutes - Red(>5000) - Hub Transport._12907C37_F3FC_4aa7_9FBB_CF4F31A93B97_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_12E827EE_60C3_4831_A24E_36AC3E1EE288_KHI: A secure connection from a domain-secured domain failed to authenticate because validation of the TLS certificate failed._12E827EE_60C3_4831_A24E_36AC3E1EE288_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_12FE16E8_AB24_4d2f_A835_7AA3C3CBD68E_Forensic: An Exchange Control Panel proxy call failed to connect with the target server._12FE16E8_AB24_4d2f_A835_7AA3C3CBD68E_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_130F3202_9E5D_4DA0_B964_798BEC49D20D_Forensic: Aggregate Delivery Queue Length (All Queues) - sustained for 5 minutes - Yellow(>3000) - Hub Transport._130F3202_9E5D_4DA0_B964_798BEC49D20D_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_131D42D4_83AD_4ace_B554_5B1D9EA5BAD8_KHI: Could not run the Test-EdgeSyncMserv diagnostic cmdlet._131D42D4_83AD_4ace_B554_5B1D9EA5BAD8_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_FalseInternal
_132D55F5_1C73_4DA9_9915_24CA010294DA_Forensic: Outlook Web App failed to parse the Address Book custom properties. Review MSExchangeOWA event 35 for the cause. A custom property file isn't valid._132D55F5_1C73_4DA9_9915_24CA010294DA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_13370019_1AF6_4A62_A8BC_EDDA80FB4209_Forensic: Outlook Web App couldn't parse the Address Book custom properties._13370019_1AF6_4A62_A8BC_EDDA80FB4209_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1337B39B_CDD8_411A_844E_AE8E4667A6DE_Forensic: The Microsoft Exchange Transport Log Search service failed to access a log file due to insufficient access permissions._1337B39B_CDD8_411A_844E_AE8E4667A6DE_Microsoft.Exchange.2010.CommonTransportLogSearchMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_133a8a56_6b9c_44e0_886c_40b6a07d74c2_KHI: The database copy is experiencing an unusually high log generation checkpoint depth for a sustained period of at least 15 minutes._133a8a56_6b9c_44e0_886c_40b6a07d74c2_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_13AA4AF1_348A_4C4A_9413_7D2D8A03BE69_Forensic: Couldn't connect to domain controller. It won't be used by ADAccess. Check for connectivity to the domain controller and that DNS is configured correctly._13AA4AF1_348A_4C4A_9413_7D2D8A03BE69_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_13AA616E_967C_4EAA_9953_FB699407119C_NonServiceImpacting: Exchange Control Panel connectivity (External) transaction failure - Test-ECPConnectivity must be run on an Exchange server._13AA616E_967C_4EAA_9953_FB699407119C_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_13d1da8f_9988_1111_8620_0e1e1aeeeee1_KHI: UMWorkerProcess Rejected Calls \% over the last 1 hour - Red (> 10)._13d1da8f_9988_1111_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_13d1da8f_9988_4c9f_8620_0e1e1aeeeee1_KHI: UM Service Rejected Calls \% over the last 1 hour - Red (> 10)._13d1da8f_9988_4c9f_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_13d1da8f_9988_4c9f_8620_0e1e1afffff1_KHI: UM Service Rejected Calls \% over the last 1 hour - Yellow (> 5)._13d1da8f_9988_4c9f_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_13d1da8f_9989_2222_8620_0e1e1afffff1_KHI: UMWorkerProcess Rejected Calls \% over the last 1 hour - Yellow (> 5)._13d1da8f_9989_2222_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_141eb379_0435_429b_8580_344d329703f5_KHI: A lost flush on the active copy was detected by a passive local database copy._141eb379_0435_429b_8580_344d329703f5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_147632D4_DFA2_4fc5_AA44_6420190F0AB9_Forensic: Indicates that Exchange Control Panel detected an error during a proxy call. MSExchange Control Panel event 30._147632D4_DFA2_4fc5_AA44_6420190F0AB9_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_14DD13CA_9D9A_491E_BEDC_52BA9FF7A3A5_Forensic: A request to establish a connection between the Exchange Active Directory Provider and a domain controller failed. The domain controller isn't available._14DD13CA_9D9A_491E_BEDC_52BA9FF7A3A5_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_14E06256_D37A_4a86_9F54_C2663E8037A6_Forensic: The database copy is low on log volume space. The volume is 50\% free._14E06256_D37A_4a86_9F54_C2663E8037A6_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpace.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_152000A6_90AF_46BC_B1CB_259F45917020_Forensic: Unable to move mailbox._152000A6_90AF_46BC_B1CB_259F45917020_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1524c5ca_250f_4c06_9f19_573fab9636e6_KHI: The Exchange store has failed to initialize._1524c5ca_250f_4c06_9f19_573fab9636e6_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_1531FD0F_C0E4_4233_B580_E0DF0D4B1632_KHI: Disk Free Megabytes low - Red(<20MB)._1531FD0F_C0E4_4233_B580_E0DF0D4B1632_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_1544FB5E_BA14_4BC8_8E91_00A85299C5FD_Forensic: An Active Directory object for the local Exchange server is not found or is invalid._1544FB5E_BA14_4BC8_8E91_00A85299C5FD_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_157E6526_9974_4b99_818F_0EC5EE27A55E_KHI: A POP3 connectivity transaction failure occurred. The Client Access server wasn't found._157E6526_9974_4b99_818F_0EC5EE27A55E_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_15A78B2E_E443_421D_B71E_86103C473D75_Forensic: Unreachable Queue Length - sustained for 5 minutes - Yellow(>150) - Edge Transport._15A78B2E_E443_421D_B71E_86103C473D75_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_1645C5C6_6EF1_4CDB_8C56_2061A74E1C69_Forensic: The MessageTrackingLog is enabled, but the MessageTrackingLogPath value is null, so the MessageTrackingLog will be disabled._1645C5C6_6EF1_4CDB_8C56_2061A74E1C69_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_16CE8C45_956A_42E7_A12C_5A238EB6598A_KHI: The WebReady Document Viewing worker application can't be found._16CE8C45_956A_42E7_A12C_5A238EB6598A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_17bec0c6_8c9d_41c2_9aac_624ee17cea09_KHI: The Exchange store failed to start because it is out of memory._17bec0c6_8c9d_41c2_9aac_624ee17cea09_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_17FA72A1_46F1_4ea2_B8B0_903259C40997_KHI: Startup inspection error on logs and/or database._17FA72A1_46F1_4ea2_B8B0_903259C40997_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_1893EE98_7AB4_4067_95D1_DAC7DCE5B77D_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed._1893EE98_7AB4_4067_95D1_DAC7DCE5B77D_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_1899C661_C3B6_4FAA_846D_9E87E1DD9552_Forensic: Failed to read message customization configuration._1899C661_C3B6_4FAA_846D_9E87E1DD9552_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_18bebc51_d05c_44f6_91e6_24193d14fe48_Forensic: The Exchange Topology discovery couldn't find the local Exchange server in Active Directory._18bebc51_d05c_44f6_91e6_24193d14fe48_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_190339AE_475D_4890_9364_88310C41BC80_Forensic: Inbound direct trust authentication failed for a certificate. Make sure the EdgeSync service (MSExchangeEdgeSync) is running._190339AE_475D_4890_9364_88310C41BC80_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_190727C5_50C3_4000_8C86_01ECCFEE4F3F_Forensic: The transport process crashed during a message processing operation. For more information, review the call stack in MSExchangeTransport event 10003._190727C5_50C3_4000_8C86_01ECCFEE4F3F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_19118F5B_2C24_4208_90B9_684C04BB95D6_Forensic: Unable to generate a unique e-mail address type._19118F5B_2C24_4208_90B9_684C04BB95D6_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_191552DE_460D_4D2F_931B_FF9C676E432F_Forensic: Anti-spam agents are enabled, but the list of internal SMTP servers is empty._191552DE_460D_4D2F_931B_FF9C676E432F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1928007D_1AAD_47E3_9C80_99DE07FFEE4B_Forensic: OABGen encountered an error while generating versions 2 and 3 of an offline address book (OAB). Not all versions of this OAB will be published._1928007D_1AAD_47E3_9C80_99DE07FFEE4B_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_193C8A2C_5BEF_4938_9D75_EB261CF81042_KHI: The Prelicensing agent couldn't acquire a license._193C8A2C_5BEF_4938_9D75_EB261CF81042_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_19A49644_20B7_4ab4_A9F1_648AF10FEC9E_Forensic: LDAP Fatal errors per minute - sustained for 5 minutes - Yellow(>5)._19A49644_20B7_4ab4_A9F1_648AF10FEC9E_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_19BFC570_8EA9_42EB_B3F7_0F40F2A00119_KHI: UM Connectivity (Local Voice) transaction failure - Microsoft Exchange Unified Messaging service isn't installed or running._19BFC570_8EA9_42EB_B3F7_0F40F2A00119_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_1a56b19b_fde3_4c8c_ac08_f867c9b752f1_KHI: Monitoring failed to run the Test-MAPIConnectivity cmdlet._1a56b19b_fde3_4c8c_ac08_f867c9b752f1_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_1A6A9C52_497F_48FE_8D54_189CC5CBE467_Forensic: DSAccess failed to register an Active Directory shutdown notification with the local server._1A6A9C52_497F_48FE_8D54_189CC5CBE467_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1A6C7853_EB10_4e40_BC6B_6C0F38AFEF7C_KHI: The Exchange Transport service is rejecting message submissions due to memory consumption higher than the configured threshold._1A6C7853_EB10_4e40_BC6B_6C0F38AFEF7C_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1A902E0E_6411_458C_A510_EC91E8236B8C_KHI: MSExchangeFDS:OAB: Download Tasks Completed - sustained for 24 hours - Red (= 0)._1A902E0E_6411_458C_A510_EC91E8236B8C_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_1ab0e09d_e98c_4596_a5e1_d3b531ca0eda_KHI: The Microsoft Exchange Mail Submission service (MSExchangeMailSubmission) isn't running._1ab0e09d_e98c_4596_a5e1_d3b531ca0eda_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_1AF4D65D_A7EB_456E_8C56_84F00B7A63AD_KHI: Exchange was unable to load the STARTTLS certificate from the local store because of a mismatch with what was configured on connector FQDN._1AF4D65D_A7EB_456E_8C56_84F00B7A63AD_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1BBFF44E_2F95_4AE4_AE46_78CA8FD50A51_KHI: UM Connectivity (Local Voice) transaction failure - Call wasn't answered before time-out._1BBFF44E_2F95_4AE4_AE46_78CA8FD50A51_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_1C1E98AC_DA9D_4D4C_AE9B_B15609382C89_KHI: The Transport Log Search service failed to create the message tracking log directory because of an error._1C1E98AC_DA9D_4D4C_AE9B_B15609382C89_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1C36EC66_5593_4F72_8E1B_A2DAAC43E953_Forensic: Outlook Web App encountered an error during initialization. The values defined for the Alt attribute in the small icon configuration file aren't valid._1C36EC66_5593_4F72_8E1B_A2DAAC43E953_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1C721700_5321_4220_84E7_906185D98DFA_KHI: Failed to execute the Test-PowerShellConnectivity (Internal) diagnostic cmdlet._1C721700_5321_4220_84E7_906185D98DFA_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_1C7AE67A_5871_4596_8DF5_3D3B8194CB17_Forensic: Exchange Control Panel detected an SSL trust failure while making a proxy call. Review MSExchange Control Panel event 26 for the cause._1C7AE67A_5871_4596_8DF5_3D3B8194CB17_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1CAECD0F_397A_4A49_AE54_C73E868D2012_KHI: Outlook Web App failed to initialize. A referenced theme folder is missing. Review MSExchangeOWA event 18 for the cause._1CAECD0F_397A_4A49_AE54_C73E868D2012_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_1cb9f62f_9cc9_498c_9fab_8708c9f1130e_KHI: The database copy is low on database volume space. The volume is 25\% free._1cb9f62f_9cc9_498c_9fab_8708c9f1130e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_1CE71A59_FD19_4050_9D19_C6F194A51477_Forensic: No valid TLS certificate was found. Exchange can't update the Active Directory Lightweight Directory Service (ADLDS) credentials._1CE71A59_FD19_4050_9D19_C6F194A51477_Microsoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1CF66670_63EC_453B_B540_E8E1151DDA00_KHI: Could not open LDAP session to Active Directory using local service credentials. Cannot access Address List configuration information._1CF66670_63EC_453B_B540_E8E1151DDA00_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1DB860AA_FC0E_4648_848E_0414B11C5918_Forensic: Protocol Analysis Background agent warning: The queue used by this agent is full. Open proxy, reverse DNS, and sender blocking are affected._1DB860AA_FC0E_4648_848E_0414B11C5918_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1DBB0083_1496_4DC3_BB20_ED992B4EDB1A_Forensic: OALGen failed to retrieve the CMS name._1DBB0083_1496_4DC3_BB20_ED992B4EDB1A_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1DD6985E_FEBA_4295_AE95_0599DFEB17C7_KHI: MSExchangeAssistants Percentage Failed Event Dispatchers - OOF Assistant_1DD6985E_FEBA_4295_AE95_0599DFEB17C7_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_1E253B35_A392_4ec0_8C82_A9D63524E627_KHI: The database copy is low on log volume space. The volume has reached critical levels (15\% free)._1E253B35_A392_4ec0_8C82_A9D63524E627_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_1e282469_a610_4503_9d78_140e528b8cec_KHI: Mail Submission Service is experiencing issues: Messages Queued For Submission - sustained for 15 minutes - Red (>25)._1e282469_a610_4503_9d78_140e528b8cec_Microsoft.Exchange.2010.Mailbox.DatabaseCopySubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_1EB1B8E2_2143_4DFC_BB2B_47775DD26E04_Forensic: OALGen is running on the wrong CCR cluster node. Only one node in the CCR cluster can generate OAB. OAB generation will not be performed._1EB1B8E2_2143_4DFC_BB2B_47775DD26E04_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1F33B344_08ED_45E0_BF33_16CBFE1342C0_Forensic: Transport pipeline tracing is active, which may degrade system performance._1F33B344_08ED_45E0_BF33_16CBFE1342C0_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_1FA9004E_19FD_4382_8DCF_2684CD60017A_Forensic: There was an invalid configuration object found in Active Directory. The object was removed from the result set._1FA9004E_19FD_4382_8DCF_2684CD60017A_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_204F2149_CB86_4a63_B530_DC13C9491CAB_KHI: Unable to create required directory for database copy. Please check the file system permissions._204F2149_CB86_4a63_B530_DC13C9491CAB_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_20E23661_C55B_4cf1_8D5F_E85850B4D016_KHI: A certificate used for federation is about to expire._20E23661_C55B_4cf1_8D5F_E85850B4D016_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_210EBF8E_0445_4F59_A945_4D9C49D8E802_Forensic: The Exchange topology couldn't be generated._210EBF8E_0445_4F59_A945_4D9C49D8E802_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2133FDD1_2E95_4474_9EB5_5429102CC7E8_KHI: The database copy is low on log volume space. The volume has reached error levels (35\% free)._2133FDD1_2E95_4474_9EB5_5429102CC7E8_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_21B49C03_96A3_45DE_978D_0CE439DF9ABA_Forensic: An unexpected provider error occurred in the Autodiscover service._21B49C03_96A3_45DE_978D_0CE439DF9ABA_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_21FEEA43_017B_41C6_8282_96E700E822E8_KHI: An accepted domain entry was found to be corrupt in Active Directory so the configuration was rejected._21FEEA43_017B_41C6_8282_96E700E822E8_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_22a54b60_b124_4b38_8550_fd126c427d4b_KHI: EdgeSync Enterprise synchronization failures._22a54b60_b124_4b38_8550_fd126c427d4b_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSynchronization_diagnostic_cmdlet._Report_Collection_FalseInternal
_22B6F00C_19A4_4777_B351_EA99C32C19B8_Forensic: PoisonCount has reached or exceeded the configured poison threshold._22B6F00C_19A4_4777_B351_EA99C32C19B8_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_22D105C7_2C52_469F_A267_1F823998B87C_Forensic: Performance counters for NSPI Proxy could not be initialized._22D105C7_2C52_469F_A267_1F823998B87C_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_22FCFD8F_383C_4D16_AFA3_47A4E5AC59AC_Forensic: The STARTTLS certificate for the remote server has expired. The certificate must be renewed to resume mail flow._22FCFD8F_383C_4D16_AFA3_47A4E5AC59AC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_230BFD33_D406_496A_8678_4106F61EB1BE_Forensic: DsProxy DLL is required but cannot be loaded._230BFD33_D406_496A_8678_4106F61EB1BE_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_234C4D8D_4EA2_4767_BA1B_73E4DCF2A89F_Forensic: Synchronization failed to read replication data from the Active Directory._234C4D8D_4EA2_4767_BA1B_73E4DCF2A89F_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_234F3E09_4BB7_4756_91AC_9E52FB10222B_KHI: Failed Availability Service request to Local Server FQDN._234F3E09_4BB7_4756_91AC_9E52FB10222B_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.FalseInternal
_23838f70_a5d3_4f6c_80f9_277912458abf_KHI: The database availability group is experiencing problems that may cause it to fail due to stale security information._23838f70_a5d3_4f6c_80f9_277912458abf_Microsoft.Exchange.2010.Mailbox.ClusterQuorumGroupSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_23A9002C_D601_41EB_BDB3_013E8834B039_Forensic: SMTP Connector rejected an incoming connection - the maximum number of connections has been reached - MSExchange Transport 1021._23A9002C_D601_41EB_BDB3_013E8834B039_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_23bbf71a_ed6a_4685_9e27_35b93f8d95fb_KHI: The Microsoft Exchange Replication service appears to be leaking operating system handles._23bbf71a_ed6a_4685_9e27_35b93f8d95fb_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_23C68C57_D642_46fa_ACDE_D54490543AEE_Forensic: Transport latency impacted - Delivery Queue for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>60)._23C68C57_D642_46fa_ACDE_D54490543AEE_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_24D7E016_D8FD_499C_8B15_6D970D4A54BF_Forensic: The OnRoutedMessage agent failed to handle a catchable exception._24D7E016_D8FD_499C_8B15_6D970D4A54BF_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2550B9AE_78EA_4e71_81C6_CF05F1F1BAB9_KHI: An IMAP4 connectivity transaction failure occurred. The session object wasn't created._2550B9AE_78EA_4e71_81C6_CF05F1F1BAB9_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_256879FC_E126_498B_9A8A_8563F2701985_Forensic: Outlook Web App failed to read or update some of its configuration settings._256879FC_E126_498B_9A8A_8563F2701985_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_259766C7_09BD_4C13_8FC1_C3B6A66054D3_Forensic: OABGen is configured to generate version 2 or version 3 OAB files for an offline address book, but there is no public folder server available._259766C7_09BD_4C13_8FC1_C3B6A66054D3_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_25C937CE_EF81_4397_B651_BA16BCE752EC_Forensic: Single page restore successfully corrected a detected error of a database copy._25C937CE_EF81_4397_B651_BA16BCE752EC_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2639298E_100A_4A8D_AF1D_65F4C8827747_KHI: Outbound direct trust authentication failed for the certificate. Make sure the EdgeSync service (MSExchangeEdgeSync) is running._2639298E_100A_4A8D_AF1D_65F4C8827747_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_266DEDE6_FA24_4244_BE0D_FA44F873F89F_Forensic: File Distribution Service: IO operation has failed. Current file synchronization operation is aborted._266DEDE6_FA24_4244_BE0D_FA44F873F89F_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_268B2FAF_2E2C_4493_90CE_988A37AF2D09_KHI: IMAP4 connectivity transaction failure - The Client Access Server was not specified._268B2FAF_2E2C_4493_90CE_988A37AF2D09_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_26BF0022_B749_40A7_86B2_071CD666BD53_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 19 for the cause._26BF0022_B749_40A7_86B2_071CD666BD53_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_27D08ADB_DAEB_4e6a_AE31_FD2A51F32EB7_Forensic: Transport availability impacted - SMTP availability of receive connector Client not meeting KHI threshold over last 15 minutes - Yellow(<99)._27D08ADB_DAEB_4e6a_AE31_FD2A51F32EB7_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_27FA91C3_D6E1_4D89_BC4D_47B0554C08D9_Forensic: Couldn't find SRV records for specified domain controller. Records may not contain correct root hints. Use Dcdiag to verify DNS server config and health._27FA91C3_D6E1_4D89_BC4D_47B0554C08D9_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_282A89AB_774B_4916_856B_EF01FE5377FD_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 7 for the cause._282A89AB_774B_4916_856B_EF01FE5377FD_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_283CC5D0_BAA8_4A3E_9E3C_C17564C04268_Forensic: The proxy request has failed to authenticate. Make sure that Integrated Authentication is enabled on the destination Client Access server._283CC5D0_BAA8_4A3E_9E3C_C17564C04268_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_285C1ECC_4480_4697_83B1_33BFE17284AB_Forensic: Content indexing is not enabled on the mailbox server._285C1ECC_4480_4697_83B1_33BFE17284AB_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_28AB6706_9F79_4594_84C1_7CC9E3DB4B1B_Forensic: The path to the protocol logging location for Receive connectors has not been set. As a result no protocol log for Receive connectors was written._28AB6706_9F79_4594_84C1_7CC9E3DB4B1B_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_28D71181_D64D_41FE_9EDE_1806EACB8AA9_KHI: Exchange could not read the Receive connector configuration. The Microsoft Exchange Transport service will be stopped._28D71181_D64D_41FE_9EDE_1806EACB8AA9_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_28EF9E80_0A6A_49D7_B7DE_BEA6B0AABCBC_Forensic: The OnSubmittedMessage agent did not handle a catchable exception._28EF9E80_0A6A_49D7_B7DE_BEA6B0AABCBC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_291C979B_85B5_4CFB_9ED5_7C614F36004E_Forensic: The Store Driver transport component failed to submit a store event. It wasn't able to generate NDR because of an exception._291C979B_85B5_4CFB_9ED5_7C614F36004E_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_29612D1E_879E_472A_9D43_730DFBEE68A7_Forensic: The configuration domain controller specified in a call to SetConfigDCName is unreachable._29612D1E_879E_472A_9D43_730DFBEE68A7_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_29B65D40_E54B_4D62_AAA9_7B401C9A161C_KHI: The worker process has failed to load the specified application configuration file. Please check the format of this file._29B65D40_E54B_4D62_AAA9_7B401C9A161C_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_29C4B213_E4EC_4551_9081_FDE34130258C_Forensic: Unable to find the e-mail address in the directory._29C4B213_E4EC_4551_9081_FDE34130258C_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2A5F93A0_4021_4602_8AD7_24F99CA0DBC2_Forensic: The Configuration Domain Controller specified in the registry wasn't found in the Sites container in Active Directory._2A5F93A0_4021_4602_8AD7_24F99CA0DBC2_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2A697BE6_8692_4D64_8DE4_0F8CF9070379_Forensic: The SendProtocolLogPath parameter is set to null; therefore, Exchange will continue to use the old location for protocol log storage._2A697BE6_8692_4D64_8DE4_0F8CF9070379_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2A85E102_7E5A_4EFF_A0B8_D1DA915E949B_KHI: The attempt to bind to the SourceIPAddress configured on the Send connector failed. The SourceIPAddress should be checked for correctness._2A85E102_7E5A_4EFF_A0B8_D1DA915E949B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2ACB5006_EC5F_46BA_94B6_4B5544DDEBA0_KHI: Privileges for the Exchange ActiveSync service are incorrect. Check permissions for the Exchange ActiveSync service's ASP.NET process account._2ACB5006_EC5F_46BA_94B6_4B5544DDEBA0_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2ADDC76B_DAA0_43dd_B316_B4DC59610A0C_Forensic: Exchange Control Panel failed to find a mailbox for a user. Review MSExchange Control Panel event 20 for the cause._2ADDC76B_DAA0_43dd_B316_B4DC59610A0C_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2B0AB697_4AED_40E1_898D_7617B43A0F47_Forensic: An incorrect record was used with the cache hash table._2B0AB697_4AED_40E1_898D_7617B43A0F47_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2b416621_57c1_45cc_b458_5282d68b8110_KHI: A restartable error has terminated operation of a database copy; it is being restarted._2b416621_57c1_45cc_b458_5282d68b8110_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_2BCB35C6_D00D_47BB_B5E0_3D9A76ABE1E0_KHI: An invalid network adapter is specified in the Transport server DNS configuration._2BCB35C6_D00D_47BB_B5E0_3D9A76ABE1E0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2c0bde4c_255c_4df0_8271_61e94e22bdcc_KHI: I/O error that may be repaired by single page restore has impacted the database copy._2c0bde4c_255c_4df0_8271_61e94e22bdcc_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_2C13199D_3D9D_4297_B89F_728F5A8DD31E_KHI: The STARTTLS certificate has expired. The certificate must be renewed to resume mail flow._2C13199D_3D9D_4297_B89F_728F5A8DD31E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2C7FBB61_CA19_4B85_9225_0B572AAE377A_Forensic: A message from a domain-secured domain failed to authenticate because no Transport Layer Security (TLS) certificate was supplied._2C7FBB61_CA19_4B85_9225_0B572AAE377A_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2C8CFB78_2CBE_46B4_AF14_2DB9655B3E17_Forensic: Site monitor failed to update the msExchServerSite attribute in AD._2C8CFB78_2CBE_46B4_AF14_2DB9655B3E17_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2CAB6F78_FD63_4D44_A1B3_8AD77F920600_Forensic: LDAP long running operations - sustained for 5 minutes - Yellow(>50)._2CAB6F78_FD63_4D44_A1B3_8AD77F920600_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_2D1A6864_C3CB_40a5_91A2_D27BA34739F8_KHI: A POP3 connectivity transaction failure occurred because a security error was found._2D1A6864_C3CB_40a5_91A2_D27BA34739F8_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_2D1E52F2_01C4_416D_92F2_40D4856C1523_KHI: Failed to execute the Test-WebServices (Internal) diagnostic cmdlet._2D1E52F2_01C4_416D_92F2_40D4856C1523_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_2D48D026_AEF0_44ba_9346_C3F61C675FC6_KHI: IMAP4 connectivity transaction failure - The Client Access Server is not RPC-enabled._2D48D026_AEF0_44ba_9346_C3F61C675FC6_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_2D5C47A8_30A4_4B40_8581_E11756A78540_KHI: There was an Exchange ActiveSync connectivity (Internal) transaction failure. The Test-ActiveSyncConnectivity cmdlet must be run on a Client Access server._2D5C47A8_30A4_4B40_8581_E11756A78540_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_2D8EF53B_A3E4_45AD_A3C3_CF4698CC3117_Forensic: Name Service Provider Interface (NSPI) Proxy encountered an unknown exception when registering its remote procedure call (RPC) endpoints._2D8EF53B_A3E4_45AD_A3C3_CF4698CC3117_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2DA60C22_AFFB_4274_80A4_D45A4D757B0C_Forensic: Aggregate Delivery Queue Length (All Queues) - sustained for 5 minutes - Yellow(>3000) - Edge Transport._2DA60C22_AFFB_4274_80A4_D45A4D757B0C_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_2DA72632_94DE_4BE6_B95A_6487CB8B85D9_Forensic: The server doesn't have the Audit Security privilege on a domain controller. This privilege is used by ADAccess. Run policytest.exe. See KB 314294._2DA72632_94DE_4BE6_B95A_6487CB8B85D9_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2DB6C285_4CEB_4DD5_997C_B8552784BC5D_Forensic: The MSExchangeAL service logged an unexpected exception. The exception is specified in the event description._2DB6C285_4CEB_4DD5_997C_B8552784BC5D_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2E148A47_B1CA_4297_B80A_964AEEE56AF2_KHI: The Exchange store database: RPC Averaged Latency - sustained for 10 minutes - Red (>200 msec)._2E148A47_B1CA_4297_B80A_964AEEE56AF2_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_2E17826C_311C_4F56_8607_81D6D29C7273_Forensic: Submission Queue Length - sustained for 5 minutes - Yellow(>150) - Hub Transport._2E17826C_311C_4F56_8607_81D6D29C7273_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_2E577DAB_0AF3_4526_A95B_2A08B3566C75_Forensic: Unsupported or unloadable policy group._2E577DAB_0AF3_4526_A95B_2A08B3566C75_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2e5f1d59_b7f6_487c_8d98_fadfed753ce2_KHI: The Microsoft Exchange Active Directory Topology Service (MSExchangeADTopology) isn't running._2e5f1d59_b7f6_487c_8d98_fadfed753ce2_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_2E923413_DE48_436B_96C6_49034F8CA1BE_KHI: There was an Outlook Web App connectivity (External) transaction failure. The Client Access server configuration check failed._2E923413_DE48_436B_96C6_49034F8CA1BE_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_2F954DCE_FA8B_43b8_8773_9961723920C6_NonServiceImpacting: MSExchangeTransport has detected a critical storage error and has taken an automated recovery action by moving the database._2F954DCE_FA8B_43b8_8773_9961723920C6_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_2FA3FD21_59B4_4567_94A7_56CA1A691442_KHI: Couldn't open a Transport database because a log file is missing or corrupted. The Transport service is shutting down._2FA3FD21_59B4_4567_94A7_56CA1A691442_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_30BF15CB_822D_43db_8F17_0AA5AD7E4EC2_Forensic: Delivery Failure Resolver 5.2.0 happened over last 5 minutes - Yellow(>1)._30BF15CB_822D_43db_8F17_0AA5AD7E4EC2_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_312AA9A4_7A67_47ED_B755_DF5A935D82E1_Forensic: The Exchange Active Directory Provider failed to obtain an IP address for an Active Directory server._312AA9A4_7A67_47ED_B755_DF5A935D82E1_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_31B5A482_1054_4ECD_AAF7_49C86CCD914B_Forensic: An error occurred when the Domain Name System (DNS) was queried for domain entries._31B5A482_1054_4ECD_AAF7_49C86CCD914B_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_31c8b203_89f3_4789_8aa9_9d0f3df2307d_KHI: The Exchange store encountered an RPC error._31c8b203_89f3_4789_8aa9_9d0f3df2307d_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_321C9E9F_39D9_4539_A957_E6C66082D3D1_Forensic: An error occurred while adding a replica of the naming context._321C9E9F_39D9_4539_A957_E6C66082D3D1_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3250F0C2_C70B_40C6_9414_E47720265C88_Forensic: Unreachable Queue Length - sustained for 5 minutes - Yellow(>150) - Hub Transport._3250F0C2_C70B_40C6_9414_E47720265C88_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_32F7DA59_3D7B_4198_A57C_A42EE4F1E318_Forensic: The OABGen couldn't generate full details because the total size of the details information is greater than 64 KB._32F7DA59_3D7B_4198_A57C_A42EE4F1E318_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3355060F_7EC7_4441_B7A3_DFB44ECD710E_Forensic: A recipient object in Active Directory isn't valid. Review the exception in MSExchange ADAccess 2156 for the cause._3355060F_7EC7_4441_B7A3_DFB44ECD710E_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_338B131E_AF3E_4F16_9383_5414FEB22408_Forensic: Failed to register Service Principal Name. This may blocks specific users from accessing their mailboxes._338B131E_AF3E_4F16_9383_5414FEB22408_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_33A0A258_F6E9_45A5_810B_8EDFAB40855B_KHI: System Attendant failed to correctly generate Address List Service information for the task._33A0A258_F6E9_45A5_810B_8EDFAB40855B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_33BD8334_D092_4E35_91E5_8F50275F2F77_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 25 for the cause._33BD8334_D092_4E35_91E5_8F50275F2F77_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_344630F0_97D3_46BB_A5AF_65B129189083_KHI: Remote server advertised hash authentication for Exchange, which isn't supported by this server._344630F0_97D3_46BB_A5AF_65B129189083_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_34a2f1e1_d3c3_4b9d_ba22_4721c3241df2_KHI: The Exchange store failed to start because it is out of file handles._34a2f1e1_d3c3_4b9d_ba22_4721c3241df2_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_34E20DF4_489F_4f4f_A2B4_9BC9E520006E_KHI: MSExchangeAssistants Percentage Failed Event Dispatchers - All Assistants_34E20DF4_489F_4f4f_A2B4_9BC9E520006E_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_34E337FE_A027_4450_A5A2_4BCB002E6AF8_Forensic: The specified connector experienced a non-SMTP gateway connection failure. An I/O exception occurred when writing to the drop directory._34E337FE_A027_4450_A5A2_4BCB002E6AF8_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_352c3963_7abe_42c0_9cd8_e6205fd154e1_KHI: One or more networks supporting the database availability group are not operating properly on this server._352c3963_7abe_42c0_9cd8_e6205fd154e1_Microsoft.Exchange.2010.Mailbox.NetworkSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_3549CDBF_4418_4248_B88D_C872CF97630D_Forensic: Unable to retrieve the local server object from Active Directory._3549CDBF_4418_4248_B88D_C872CF97630D_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_357A2E92_D617_42f3_8897_2A8944BF32C6_KHI: MSExchangeAssistants Memory Process_357A2E92_D617_42f3_8897_2A8944BF32C6_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_35894360_F523_4623_88C0_66A69242C91A_KHI: Error occurred while running the Test-MAPIConnectivity diagnostic cmdlet._35894360_F523_4623_88C0_66A69242C91A_Microsoft.Exchange.2010.MailboxTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_35D2D96C_9335_4655_9062_31CE24404CD4_KHI: A Transport database operation has encountered a fatal error. The Transport service is shutting down._35D2D96C_9335_4655_9062_31CE24404CD4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3637BB82_69CE_49FC_9711_0DFEF5BD3F5D_Forensic: Poison Queue Length - sustained for 5 minutes - Yellow(>1) - Edge Transport._3637BB82_69CE_49FC_9711_0DFEF5BD3F5D_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_36D49C26_3EEA_4053_872E_D5C76F457582_Forensic: Exchange ActiveSync could not access a mailbox on a Mailbox server because the Mailbox server is offline._36D49C26_3EEA_4053_872E_D5C76F457582_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_36E2084D_0CE5_48D9_AC6B_C356AFECDDC1_KHI: Exchange ActiveSync connectivity (Internal) transaction failure - Autodiscovery failure._36E2084D_0CE5_48D9_AC6B_C356AFECDDC1_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_36EFCC81_FEDA_49DE_9DB9_674EC166B096_Forensic: Failed to read object configuration from Active Directory._36EFCC81_FEDA_49DE_9DB9_674EC166B096_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_370708C1_0DE7_4B70_8EC7_13A709716D68_KHI: Sender ID agent: DNS isn't configured. Messages will temporarily be handled as if DNS requests have failed._370708C1_0DE7_4B70_8EC7_13A709716D68_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_383BCDC1_09DF_48AF_AD6C_2C1A01B5370B_Forensic: No route could be found to the MDB file for the Public Folder Hierarchy in the routing tables._383BCDC1_09DF_48AF_AD6C_2C1A01B5370B_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_38449724_BBDC_4830_B864_0D0CC1120FB3_Forensic: Name Server Provider Interface (NSPI) Proxy is unable to run because the listen thread on transport failed to start._38449724_BBDC_4830_B864_0D0CC1120FB3_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3899AE0C_84F2_45E1_A8D1_E0A1A4C20353_NonServiceImpacting: Exchange failed to create the log directory. Logs won't be generated until the reason for the failure is corrected._3899AE0C_84F2_45E1_A8D1_E0A1A4C20353_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_38D7F8FC_D9CC_4a45_B46C_8AA45036E04D_KHI: An IMAP4 connectivity transaction failure occurred. The specified user isn't unique._38D7F8FC_D9CC_4a45_B46C_8AA45036E04D_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_38F21856_8ED8_4F3F_8322_D434B17DD752_NonServiceImpacting: At least one file couldn't be processed. These files have been tagged with .bad extensions. Look for .bad files, and verify the content is valid._38F21856_8ED8_4F3F_8322_D434B17DD752_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_39062768_8a67_407a_814f_517db9636dba_KHI: The Microsoft Exchange POP3 service (MSExchangePOP3) isn't running._39062768_8a67_407a_814f_517db9636dba_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_393C857B_1CA9_4BB6_9418_98C95B78FFA9_Forensic: Name Server Provider Interface (NSPI) Proxy called DSAccess to obtain a list of available global catalog servers._393C857B_1CA9_4BB6_9418_98C95B78FFA9_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_39b3d6e6_489d_45dc_a807_670ed64b10c8_KHI: The database copy is experiencing an unusually high log generation rate (bytes written/second) for a sustained period of at least 15 minutes._39b3d6e6_489d_45dc_a807_670ed64b10c8_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_39cd29e8_711a_4e12_9e17_3fc899a6a09a_KHI: A restartable error has terminated operation of a local database copy; it is being restarted. _39cd29e8_711a_4e12_9e17_3fc899a6a09a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_39D6C3C9_D473_43E9_8F99_A146D61893C6_Forensic: Retry Mailbox Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._39D6C3C9_D473_43E9_8F99_A146D61893C6_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_39FBF829_B719_4acc_91E2_B897ADFCE3EB_KHI: A possible split brain (two active copies of a database) on a database copy has been detected; log replay for the passive database copy is terminated. _39FBF829_B719_4acc_91E2_B897ADFCE3EB_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_3A20FF1F_E761_49B9_B012_0FEFF9D4128A_Forensic: A user couldn't sign in to Outlook Web App because the user's Active Directory profile doesn't have a primary SMTP address._3A20FF1F_E761_49B9_B012_0FEFF9D4128A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3a90fd51_603b_40b0_8e8f_0cb49353b20e_KHI: Exchange store: Public Folder Database: Messages Queued for Submission - sustained for 15 minutes - Red (>35)._3a90fd51_603b_40b0_8e8f_0cb49353b20e_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_3A9FBFFA_221F_42cd_A0B4_8F4FFC1AC39B_KHI: The Microsoft Exchange Transport Log Search service was unable to access the registry._3A9FBFFA_221F_42cd_A0B4_8F4FFC1AC39B_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3AA11229_64DD_4f25_B90A_E3019AE59BDE_NonServiceImpacting: The specified correlation time window value is less than the minimum allowed value._3AA11229_64DD_4f25_B90A_E3019AE59BDE_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTrueInternal
_3B05FAB7_34D0_4497_91D5_EA2E55D4E7F9_KHI: An error occurred while running the Test-ECPConnectivity (Internal) cmdlet._3B05FAB7_34D0_4497_91D5_EA2E55D4E7F9_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_3bada911_af24_48c8_81c0_7bd31d7edd03_KHI: A lost flush on the active copy was detected by a passive database copy._3bada911_af24_48c8_81c0_7bd31d7edd03_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_3BF27765_E45F_415c_AEE0_3C18352C8328_KHI: Failed to execute the Test-OutlookWebServices diagnostic cmdlet._3BF27765_E45F_415c_AEE0_3C18352C8328_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.FalseInternal
_3C284AC9_F577_465E_8B5A_07136A44C63C_Forensic: Couldn't find SRV records for domain controller. An SRV record may be configured incorrectly in DNS. Use Dcdiag to check domain controller and DNS health._3C284AC9_F577_465E_8B5A_07136A44C63C_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3c6be1b4_7b18_46b3_b938_1c664daad201_Forensic: The average MSExchangeAB NSPI directory browse request is taking longer than the allotted threshold and negatively affecting the Outlook experience._3c6be1b4_7b18_46b3_b938_1c664daad201_Microsoft.Exchange.2010.ClientAccessOutlookDirectoryMicrosoft.Exchange.2010.ClientAccessOutlookDirectory.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_3c6be1b4_7b18_46b3_b938_1c664daad203_KHI: The average Microsoft Exchange Address Book NSPI directory request is taking longer than the allotted threshold. This is negatively affecting the Outlook experience._3c6be1b4_7b18_46b3_b938_1c664daad203_Microsoft.Exchange.2010.ClientAccessOutlookDirectorySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_3C7D1A98_A2FC_4418_AFD6_C012056C891E_Forensic: There was an error loading configuration for the address rewriting agent._3C7D1A98_A2FC_4418_AFD6_C012056C891E_Microsoft.Exchange.2010.EdgeTransportAgentsAddressRewriteMicrosoft.Exchange.2010.EdgeTransportAgentsAddressRewrite.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3C91595B_CB27_4E09_8F3E_B8C85038527A_KHI: Outlook Web App failed to initialize. A theme ID attribute wasn't found. Review MSExchangeOWA event 24 for the cause._3C91595B_CB27_4E09_8F3E_B8C85038527A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_3CCC7EE7_C53D_4A1E_A2E7_63E8400F71EC_Forensic: Failed to read ADLDS SSL port from registry._3CCC7EE7_C53D_4A1E_A2E7_63E8400F71EC_Microsoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3CF7A477_4CC8_4312_AEE2_AAF4B9018AE3_Forensic: Site monitor failed to start._3CF7A477_4CC8_4312_AEE2_AAF4B9018AE3_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3D291976_D50B_4348_9325_AA40834C4190_Forensic: Transport latency impacted - SMTP Receive for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._3D291976_D50B_4348_9325_AA40834C4190_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_3D6552DA_2A91_4210_ACFC_0704B1BCDE3F_KHI: Transport IsMemberOfResolver ResolvedGroups Cache nearing capacity - Yellow(>66)._3D6552DA_2A91_4210_ACFC_0704B1BCDE3F_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_3DAE468F_AE2F_4090_A435_96B7ACB23778_KHI: A secure connection to a domain-secured domain couldn't be established because validation of the TLS certificate failed._3DAE468F_AE2F_4090_A435_96B7ACB23778_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3dc23ab6_58f8_4c76_a32c_fac83fe72ff2_KHI: The Microsoft Exchange Replication service couldn't enable the log copier listener._3dc23ab6_58f8_4c76_a32c_fac83fe72ff2_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_3e078288_bb7c_495c_8808_8af40ce15274_KHI: The Exchange store has terminated._3e078288_bb7c_495c_8808_8af40ce15274_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3E1D5C22_4DBE_470f_A3F7_FE3FAD610D35_KHI: Local database copy was unexpectedly dismounted. _3E1D5C22_4DBE_470f_A3F7_FE3FAD610D35_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_3e83a5a4_72ed_4a56_914c_2e823ededec8_KHI: The Exchange store has terminated due to an out-of-memory error._3e83a5a4_72ed_4a56_914c_2e823ededec8_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_3f05ea1c_6937_472f_8d7b_06055174fdcd_KHI: A performance problem impacted a database copy's storage; client performance may be impacted._3f05ea1c_6937_472f_8d7b_06055174fdcd_Microsoft.Exchange.2010.Mailbox.DatabaseCopyIntegritySuppressionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_3F062C11_E57B_4e77_8F43_D75C24AF7E52_KHI: MSExchangeTransport found a critical storage error and has stopped because of insufficient permission to update registry._3F062C11_E57B_4e77_8F43_D75C24AF7E52_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3FAFE99E_9776_48AB_804B_ADC53E1245F4_KHI: The Transport database log file path is invalid. The Microsoft Exchange Transport service is shutting down._3FAFE99E_9776_48AB_804B_ADC53E1245F4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_3FE64847_AA4E_46C4_9AF1_4E8EED57625B_Forensic: An internal server error occurred in the Exchange Web Services component._3FE64847_AA4E_46C4_9AF1_4E8EED57625B_Microsoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4001CC92_1A2D_4141_A804_6FFB870A8546_Forensic: The Autodiscover service couldn't discover the Availability service that's running in a remote Active Directory forest._4001CC92_1A2D_4141_A804_6FFB870A8546_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_405F269F_96F8_4836_9EE0_C92E9DE95C29_KHI: Could not search under a given entry in the directory. Cannot access Address List information._405F269F_96F8_4836_9EE0_C92E9DE95C29_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_40963FC2_6525_4F9A_AA2E_6CCB9E1402F9_KHI: Connection Filter agent: DNS isn't configured. The IP Allow List and Block List providers will be skipped._40963FC2_6525_4F9A_AA2E_6CCB9E1402F9_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_41079587_CD8C_4816_812C_77CEBF392D65_KHI: IMAP4 connectivity transaction failure - The Client Access server was not found._41079587_CD8C_4816_812C_77CEBF392D65_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_41133115_B1CA_426c_802C_09EF886D399F_Forensic: Exchange Control Panel detected an unhandled exception during a page request. Review MSExchange Control Panel event 4 for the cause._41133115_B1CA_426c_802C_09EF886D399F_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4138B412_B2A4_445f_80C6_13C9EBB4C0F0_Forensic: An external ECP CAS server wasn't authorized to make proxy calls to the internal CAS server. Review MSExchange Control Panel event 27 for the cause._4138B412_B2A4_445f_80C6_13C9EBB4C0F0_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4177B349_28AB_4461_8DF8_C9FEBB1B040A_NonServiceImpacting: Exchange failed to write the logs because of an error. The source component and cause of the error are specified in the event description._4177B349_28AB_4461_8DF8_C9FEBB1B040A_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_41c1bff4_4479_403d_9e38_e185e3a25d4b_KHI: The Exchange store has terminated._41c1bff4_4479_403d_9e38_e185e3a25d4b_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_41E65896_4A55_4E16_8F33_E01658AFD7F7_Forensic: Processing the MSExchangeTransport Pickup file caused the Transport process to fail. The file will be deleted._41E65896_4A55_4E16_8F33_E01658AFD7F7_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4293FD6B_30CE_46e5_B082_0A1CF65E4D94_KHI: Target server error has blocked continuous replication of a database copy. _4293FD6B_30CE_46e5_B082_0A1CF65E4D94_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_42B21E0B_C7DF_4633_99A9_5166420E0DAD_Forensic: Name Server Provider Interface (NSPI) Proxy encountered an unknown error while creating a new packet. The received data is being dropped._42B21E0B_C7DF_4633_99A9_5166420E0DAD_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4343597F_1F09_46a4_8E8F_DED6DCF26A60_KHI: Database copy had an storage error that must be repaired as a passive copy. A successful failover was performed to enable automatic page patching._4343597F_1F09_46a4_8E8F_DED6DCF26A60_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_435824D4_7DC5_4E42_ADAD_26A7E19BFDAC_Forensic: The DNS servers for the specified domain aren't responding._435824D4_7DC5_4E42_ADAD_26A7E19BFDAC_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4372C938_F198_43FD_AB3D_9C1729347D30_KHI: The MSExchangeAL service logged an out of memory exception._4372C938_F198_43FD_AB3D_9C1729347D30_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_43A05F7E_F7D5_4379_9EFC_9299DFEC4A61_KHI: Failed to run the Test-ExchangeSearch diagnostic cmdlet._43A05F7E_F7D5_4379_9EFC_9299DFEC4A61_Microsoft.Exchange.2010.MailboxTestConfigSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ExchangeSearch_cmdlet.FalseInternal
_43AC1C05_6771_43A1_857D_31C39C4C0820_Forensic: OALGen is running on an SCC cluster node which does not have the registry value 'OabDropFolderLocation' or it is set to a non-existing path._43AC1C05_6771_43A1_857D_31C39C4C0820_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_43FAC9E7_0930_492C_BAFB_4C8D41E2237E_KHI: An error occurred while running the Test-ActiveSyncConnectivity (Internal) cmdlet._43FAC9E7_0930_492C_BAFB_4C8D41E2237E_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_4477BD00_EBF0_4CBD_9696_A0831CAF877F_NonServiceImpacting: Can't delete files from Pickup directory. Verify Network Service account has Delete Subfolders and Files permission for the directory._4477BD00_EBF0_4CBD_9696_A0831CAF877F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_447EADF1_6A25_4E8C_9229_3BEA94FB968A_Forensic: An internal error occurred. Restart the Microsoft Exchange Active Directory Topology service._447EADF1_6A25_4E8C_9229_3BEA94FB968A_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_44F9662F_3ABB_4FB5_8824_2EF1A2AAE291_NonServiceImpacting: Recipient(s) encountered with invalid master account SIDs._44F9662F_3ABB_4FB5_8824_2EF1A2AAE291_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4505324C_4DF5_4830_85B1_611107772E2A_KHI: A POP3 connectivity transaction failure occurred. The Client Access server isn't enabled for RPC._4505324C_4DF5_4830_85B1_611107772E2A_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_453DE7A5_9C2B_4466_BBCB_95CA13B88993_Forensic: An asynchronous LDAP call failed. In the absence of other events, you can ignore this one._453DE7A5_9C2B_4466_BBCB_95CA13B88993_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_45CBC307_03C8_44E3_B504_79D338F98F6D_KHI: Exchange Control Panel connectivity (External) transaction failures._45CBC307_03C8_44E3_B504_79D338F98F6D_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_45e93ff8_96b7_49c1_ac41_24ffbeca65d4_KHI: I/O error that may be repaired by single page restore has impacted the local database copy._45e93ff8_96b7_49c1_ac41_24ffbeca65d4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_46017BF5_3B8D_45de_B7D1_767218AEE71D_Forensic: Transport latency impacted - Messages Deferred for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>60)._46017BF5_3B8D_45de_B7D1_767218AEE71D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_47460C0B_24EA_48F2_8D46_162F75CA2363_Forensic: Renewal of EdgeSync credential failed for an Edge Transport server._47460C0B_24EA_48F2_8D46_162F75CA2363_Microsoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_47C966D2_01A3_4E1E_AD39_434C8CB97BC7_Forensic: The Exchange Active Directory Provider didn't find any global catalog servers._47C966D2_01A3_4E1E_AD39_434C8CB97BC7_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_47EB2468_9B3A_4C94_8FFF_4D012390C666_Forensic: Exchange was unable to load the resolver performance counters._47EB2468_9B3A_4C94_8FFF_4D012390C666_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_48003315_F73A_4F6B_8108_A1A6F7C34432_KHI: The Test-UMConnectivity (Local Voice) cmdlet failed to run._48003315_F73A_4F6B_8108_A1A6F7C34432_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_483A04E9_66F9_442f_802F_A2E18D0EE227_KHI: Database copy is "failed and suspended"; it is not keeping up with the changes on the active database copy._483A04E9_66F9_442f_802F_A2E18D0EE227_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_48865281_E001_4386_A5AA_155449BDAE73_KHI: The database copy is low on database volume space. The volume has reached critical levels (8\% free)._48865281_E001_4386_A5AA_155449BDAE73_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_489e8fc9_5528_4dd3_9daf_a59e790ab6c7_KHI: Error occurred while executing the Test-ReplicationHealth diagnostic cmdlet._489e8fc9_5528_4dd3_9daf_a59e790ab6c7_Microsoft.Exchange.2010.MailboxTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ReplicationHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_48E09538_BE62_414C_9DFA_23ABA0C456E4_KHI: There's an error in your Outlook Web App configuration. A character in a file extension isn't valid._48E09538_BE62_414C_9DFA_23ABA0C456E4_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_492e65ec_db1b_44b3_a353_7efa9111eb5a_KHI: An uncorrectable failure exists in a database copy; it may terminate replication or dismount._492e65ec_db1b_44b3_a353_7efa9111eb5a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_493A2404_E18F_47BF_9A61_3A3E7E82277C_Forensic: The topology doesn't have a route to the Active Directory site in the routing tables._493A2404_E18F_47BF_9A61_3A3E7E82277C_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_495d9853_77bd_4ccb_87f6_55944f7cf41a_KHI: Mail submission is not keeping up with the work being presented by the changes to the locally mounted databases._495d9853_77bd_4ccb_87f6_55944f7cf41a_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_4961BFCD_339F_42C0_A6A6_AE31B78183C0_Forensic: Name Service Provider Interface (NSPI) Proxy could not register an interface on any network transport. NSPI Proxy is unable to run._4961BFCD_339F_42C0_A6A6_AE31B78183C0_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_49F9F645_068D_4E4B_A2F3_05CF2495FB9A_KHI: The Content Filter agent couldn't be initialized._49F9F645_068D_4E4B_A2F3_05CF2495FB9A_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4A1E55BD_96B7_4233_800F_C03039163DE3_KHI: The Win32 API call returned an error. The service could not be initialized._4A1E55BD_96B7_4233_800F_C03039163DE3_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4B251AFE_1B77_4e7d_B16A_36CD703A60D0_KHI: The Exchange Transport service was unable to listen on the Receive connector because a 'Socket Access Denied' error was encountered._4B251AFE_1B77_4e7d_B16A_36CD703A60D0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4B3C9937_ACF4_401c_A6A8_BDB8D09D36CB_KHI: A POP3 connectivity transaction failure occurred. There is no Exchange virtual server on the server that was specified by the user._4B3C9937_ACF4_401c_A6A8_BDB8D09D36CB_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_4BE15BB4_52B5_473E_97F8_D000CE33783C_Forensic: The Outlook Web App proxy failed because the server that was supposed to receive the proxy traffic didn't respond._4BE15BB4_52B5_473E_97F8_D000CE33783C_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4BEA2550_AA4D_4140_A6A9_0BD374B65A19_Forensic: Largest Delivery Queue Length - sustained for 5 minutes - Red(>250) - Edge Transport._4BEA2550_AA4D_4140_A6A9_0BD374B65A19_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_4c17b04a_39a3_476a_b93d_929c4c99feb6_KHI: An error occurred while running the Test-MAPIConnectivity cmdlet._4c17b04a_39a3_476a_b93d_929c4c99feb6_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_4CBF2D11_2C05_43D3_9922_BBEBD63F727B_Forensic: OABGen received an error while generating the differential offline address book file._4CBF2D11_2C05_43D3_9922_BBEBD63F727B_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4CBF368D_A233_49DF_B326_3F062478D701_Forensic: An invalid smart hosts string was detected in the routing tables for the specified SMTP connector. The SMTP connector has been ignored._4CBF368D_A233_49DF_B326_3F062478D701_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4CF3A45F_4007_4c06_974B_F5BCF33AAFDA_KHI: Transport latency impacted - percent messages completing categorization over last 5 min - Red(<1)._4CF3A45F_4007_4c06_974B_F5BCF33AAFDA_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_4D08FC5D_754E_401A_8A72_38FA59C1C435_Forensic: System Attendant failed while restarting its internal services._4D08FC5D_754E_401A_8A72_38FA59C1C435_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4d4972b4_1606_45c0_b01a_8a489f474864_KHI: The Exchange store has terminated due to an out-of-memory error._4d4972b4_1606_45c0_b01a_8a489f474864_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4e44e5df_d6c5_4e47_8dd9_7a9c4b09e9b0_KHI: The Exchange store encountered an RPC error._4e44e5df_d6c5_4e47_8dd9_7a9c4b09e9b0_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_4E77581D_0ABD_4DE4_ACB0_882E911B617A_KHI: The database file doesn't match the log files. The Microsoft Exchange Transport service is shutting down._4E77581D_0ABD_4DE4_ACB0_882E911B617A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_4F028C01_AFBF_4093_A4DE_C1081FB53C02_KHI: Outlook Web App connectivity (Internal) transaction failures._4F028C01_AFBF_4093_A4DE_C1081FB53C02_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C01_KHI: HTTP Connectivity with Autodiscover - Address Book failure (NSPI)_4F129C11_AFBF_4093_A4DE_C1081FB53C01_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C03_KHI: HTTP Connectivity with Autodiscover - Address Book failure (ABREF)_4F129C11_AFBF_4093_A4DE_C1081FB53C03_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C05_KHI: HTTP Connectivity with Autodiscover - Autodiscover failure_4F129C11_AFBF_4093_A4DE_C1081FB53C05_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C07_KHI: HTTP Connectivity with Autodiscover - RPC Client Access failure (Connect)_4F129C11_AFBF_4093_A4DE_C1081FB53C07_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C09_KHI: HTTP Connectivity with Autodiscover - RPC Client Access failure (Logon)_4F129C11_AFBF_4093_A4DE_C1081FB53C09_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53C0A_KHI: HTTP Connectivity with Autodiscover - Unexpected Exception_4F129C11_AFBF_4093_A4DE_C1081FB53C0A_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E01_KHI: TCP Connectivity with Autodiscover - Address Book failure (NSPI)_4F129C11_AFBF_4093_A4DE_C1081FB53E01_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E03_KHI: TCP Connectivity with Autodiscover - Address Book failure (ABREF)_4F129C11_AFBF_4093_A4DE_C1081FB53E03_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E05_KHI: TCP Connectivity with Autodiscover - Autodiscover failure_4F129C11_AFBF_4093_A4DE_C1081FB53E05_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E07_KHI: TCP Connectivity with Autodiscover - RPC Client Access failure (Connect)_4F129C11_AFBF_4093_A4DE_C1081FB53E07_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E09_KHI: TCP Connectivity with Autodiscover - RPC Client Access failure (Logon)_4F129C11_AFBF_4093_A4DE_C1081FB53E09_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F129C11_AFBF_4093_A4DE_C1081FB53E0A_KHI: TCP Connectivity with Autodiscover - Unexpected Exception_4F129C11_AFBF_4093_A4DE_C1081FB53E0A_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_FalseInternal
_4F6A51D1_2AF5_4102_8286_BA477BE94D82_Forensic: OABGen received an error while trying to publish one of the offline address book files to the distribution point._4F6A51D1_2AF5_4102_8286_BA477BE94D82_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_50dc456d_032e_44ef_809f_2b94c690f5b2_KHI: The Federated Delivery Encryption agent failed to find the OrganizationFederatedMailbox. Outbound messages to Outlook Live will be affected until this issue is resolved._50dc456d_032e_44ef_809f_2b94c690f5b2_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5158F906_9C5D_4384_972C_FBBA2C67494B_KHI: Could not read a registry key because the value is not a DWORD._5158F906_9C5D_4384_972C_FBBA2C67494B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_518F5D8E_7568_4308_8E17_E8CFDA9E2549_Forensic: A MAPI call failed with a specific error. Review the error in the event description for more information._518F5D8E_7568_4308_8E17_E8CFDA9E2549_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_519D0B8E_0D8F_479d_B83F_630A7DB86FBF_NonServiceImpacting: The correlation interval value specified is less than the minimum allowed value._519D0B8E_0D8F_479d_B83F_630A7DB86FBF_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTrueInternal
_51E62EDA_7598_482F_B4A8_B696B9B097A1_Forensic: Exchange ActiveSync has encountered repeated failures with a mailbox server. The process will be postponed._51E62EDA_7598_482F_B4A8_B696B9B097A1_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5248a119_d598_44d3_b61f_47d98c66d81d_KHI: The Microsoft Exchange Transport Log Search Service (MSExchangeTransportLogSearch) isn't running._5248a119_d598_44d3_b61f_47d98c66d81d_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_5325C293_7F2A_47E9_93E1_D7A9E797D8F8_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 9 for the cause._5325C293_7F2A_47E9_93E1_D7A9E797D8F8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_532FE988_BEE8_4B1B_AFDA_78E942401A50_KHI: Outlook Web App failed to initialize. A required forms registry folder doesn't exist. For more information, review MSExchangeOWA event 3._532FE988_BEE8_4B1B_AFDA_78E942401A50_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_535FD5EE_9D0A_4d25_B785_9321A2F9DA1E_Forensic: Transport availability impacted - SMTP availability of receive connector Default not meeting KHI threshold over last 15 minutes - Yellow(<99)._535FD5EE_9D0A_4d25_B785_9321A2F9DA1E_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_53D12730_3893_4B37_A905_8997399991DD_Forensic: There are too many mail submission threads on this server._53D12730_3893_4B37_A905_8997399991DD_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_540CC48A_9805_4BFF_B107_0EB79264F47C_KHI: Outlook Web App failed to retrieve the Active Directory system configuration session._540CC48A_9805_4BFF_B107_0EB79264F47C_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_548DD1CE_0062_49b7_B26F_8EC44B5632AE_KHI: Delivery Failure Delivery-StoreDriver 5.6.0 happened over last 5 minutes - Yellow(>5)._548DD1CE_0062_49b7_B26F_8EC44B5632AE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_54ba6691_179e_4f9f_b382_9c18fa2952f8_KHI: The Microsoft Exchange Mailbox Replication Service (MSExchangeMailboxReplication) isn't running._54ba6691_179e_4f9f_b382_9c18fa2952f8_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_54EC3622_173F_48A3_8DE1_5B7DB9A5758D_Forensic: Active Directory Address Book Referral failed to service a client request. ABREF is returning an error._54EC3622_173F_48A3_8DE1_5B7DB9A5758D_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_551A231F_3DB0_4CF5_ADFE_1CE5FB0FA2CA_Forensic: A general Active Directory error occured. Review the error code in the event description to determine the cause of this error._551A231F_3DB0_4CF5_ADFE_1CE5FB0FA2CA_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5555618F_B0E5_4ebb_845D_32BDE9CD45AE_KHI: High percentage of transport submissions denied due to Throttling Service Client - sustained for 30 minutes - Red(>10)_5555618F_B0E5_4ebb_845D_32BDE9CD45AE_Microsoft.Exchange.2010.CommonTransportThrottlingClientSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_55A216A0_2052_45D6_AF6D_AF55A3EC8518_Forensic: A corrupted calendar configuration was detected for a user. Review MSExchangeOWA event 59 for the cause. Exchange is resetting the configuration._55A216A0_2052_45D6_AF6D_AF55A3EC8518_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_55C217C7_9917_4d40_B24E_B5773928D334_Forensic: Delivery Failure Delivery-SMTP 5.6.0 happened over last 5 minutes - Yellow(>10)._55C217C7_9917_4d40_B24E_B5773928D334_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_5634EDAB_8830_4847_98FF_13395FBA7729_KHI: The WebReady Document Viewing manager wasn't able to access the temporary folder._5634EDAB_8830_4847_98FF_13395FBA7729_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_5665741F_6251_493B_A8F9_7177B874BA9F_Forensic: No source routing group was found in the routing tables for the specified connector. Therefore, the connector has been skipped._5665741F_6251_493B_A8F9_7177B874BA9F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_56BD09AF_C130_4A5E_92FB_0A2E7AECB1CD_Forensic: Outlook Web App failed to read or update some of its configuration settings._56BD09AF_C130_4A5E_92FB_0A2E7AECB1CD_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_56CA36BA_25E2_449E_9E97_7B046EDE965E_Forensic: Unable to generate the e-mail address; the address type is not valid._56CA36BA_25E2_449E_9E97_7B046EDE965E_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_56E55046_0CE9_11DB_9607_00E08161165F_KHI: Exchange was unable to execute the diagnostic cmdlet to probe the IMAP4 connectivity state._56E55046_0CE9_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_57339DBE_CEEC_4F59_803A_9774679400A5_Forensic: Exchange was unable to delete the Routing Table log file._57339DBE_CEEC_4F59_803A_9774679400A5_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5749B845_A5E5_400A_9C63_1E4530EE9811_Forensic: Unable to generate e-mail addresses because no valid e-mail address types were specified._5749B845_A5E5_400A_9C63_1E4530EE9811_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_577C111B_15DF_4431_B1FE_6C456B8055ED_Forensic: Exchange was unable to load the configuration information needed for routing. The operation will be retried after the specified interval._577C111B_15DF_4431_B1FE_6C456B8055ED_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5781158F_604A_4936_8004_0FEB3E99BFEF_KHI: Failed to execute the Test-OWAConnectivity (Internal) diagnostic cmdlet._5781158F_604A_4936_8004_0FEB3E99BFEF_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_57B6F34B_C97C_414D_ACC5_05B91C4A8680_KHI: The Autodiscover service encountered an installation error._57B6F34B_C97C_414D_ACC5_05B91C4A8680_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_57F767A4_EF9F_4DB2_8A84_1DBCFB45EE8D_Forensic: Name Service Provider Interface (NSPI) Proxy ran out of memory during initialization._57F767A4_EF9F_4DB2_8A84_1DBCFB45EE8D_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_57FCB465_BAE0_406B_BB75_C6A73FEC302B_Forensic: The Directory Service Address Book Referral failed to start._57FCB465_BAE0_406B_BB75_C6A73FEC302B_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5867894F_2593_411D_B827_C8EAF4B39390_Forensic: Name Service Provider Interface (NSPI) Proxy encountered an unknown error while initializing shared memory for performance counter data._5867894F_2593_411D_B827_C8EAF4B39390_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_586EC960_8281_402F_AFF4_FA9ED992B108_KHI: DSAccess failed to provide a domain controller to use to read configuration. Proxy address calculation services will not be available._586EC960_8281_402F_AFF4_FA9ED992B108_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_58AEC5AA_0187_4bc1_A782_F7D1BB425922_KHI: POP3 connectivity transaction failures._58AEC5AA_0187_4bc1_A782_F7D1BB425922_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_59209CC1_24D3_40D2_AD45_49CE1FFCFC1A_Forensic: An RPC request to the Microsoft Exchange Active Directory Topology service failed._59209CC1_24D3_40D2_AD45_49CE1FFCFC1A_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_59499042_8E6D_4D73_8287_824B8D631E97_Forensic: An error occured when loading the configuration for the Attachment Filtering Agent. The configuration may be corrupted or AD LDS may be unreachable._59499042_8E6D_4D73_8287_824B8D631E97_Microsoft.Exchange.2010.EdgeTransportAgentsAttachmentFilterMicrosoft.Exchange.2010.EdgeTransportAgentsAttachmentFilter.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5954F704_AFAC_403D_AA28_625F0A6BACD2_Forensic: OABGen couldn't create a message to post in the public folder._5954F704_AFAC_403D_AA28_625F0A6BACD2_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5A27551C_1C7C_47c1_9165_020CB0CB9BE4_KHI: The Microsoft Exchange Unified Messaging service wasn't able to encrypt or decrypt a voice message._5A27551C_1C7C_47c1_9165_020CB0CB9BE4_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.ProtectedVoiceMessageSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5A2A1413_D9B5_48dd_AB94_23D8B2BB98FD_KHI: Database copy had an storage error that could not be automatically repaired without trying as passive copy. Active copy failed to move. _5A2A1413_D9B5_48dd_AB94_23D8B2BB98FD_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_5a5f19f0_6ef2_4256_a30d_cd0d12326765_KHI: At startup, the Microsoft Exchange Replication service isn't fully initialized. The log copier listener didn't start._5a5f19f0_6ef2_4256_a30d_cd0d12326765_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_5AB186A8_551E_4068_8224_9532EE781577_KHI: The Transport Layer Security (TLS) Certificate for the specified partner domain couldn't be validated._5AB186A8_551E_4068_8224_9532EE781577_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5B5F1E05_B45F_4a04_92D2_B004E8CF07B9_Forensic: Transport latency impacted - Submission Queue for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._5B5F1E05_B45F_4a04_92D2_B004E8CF07B9_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_5B6E7C1A_AD46_4984_953B_7765E361D0EC_KHI: The local database copy experienced an index corruption. Please reseed the catalog by using the Update-MailboxDatabaseCopy cmdlet with the -CatalogOnly parameter._5B6E7C1A_AD46_4984_953B_7765E361D0EC_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5B9CAC34_0BE9_48C4_A4DA_B3E0274ACB69_Forensic: The SMTP service completed authentication but couldn't determine the account name or security identifier (SID) for this authentication attempt._5B9CAC34_0BE9_48C4_A4DA_B3E0274ACB69_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5C0C61F7_4636_498A_9C0B_6E0D14560E8E_Forensic: File Distribution Service: Manifest file for Offline Address Book is corrupted. Aborting current file synchronization operation._5C0C61F7_4636_498A_9C0B_6E0D14560E8E_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5c13c964_19a5_4b82_8abc_381637445d44_KHI: The Client Access server wasn't able to contact a Unified Messaging server for a Play On Phone request._5c13c964_19a5_4b82_8abc_381637445d44_Microsoft.Exchange.2010.ClientAccessUnifiedMessagingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5C46F87F_17BB_4dec_8B2F_2FD232E1A5A5_KHI: The Exchange Transport service was unable to start listening on the Receive connector binding because the address is already in use._5C46F87F_17BB_4dec_8B2F_2FD232E1A5A5_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5CFCFC4B_EED9_4188_B2D3_592EB4F1CD38_Forensic: Pickup service cannot submit the message due to database issues._5CFCFC4B_EED9_4188_B2D3_592EB4F1CD38_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5D82E27E_9EE6_4EFE_9FF1_3826E8059AFF_Forensic: The Transport process couldn't save poison message information to the registry._5D82E27E_9EE6_4EFE_9FF1_3826E8059AFF_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5DB2712E_607A_450E_9695_083B7109E930_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 5 for the cause._5DB2712E_607A_450E_9695_083B7109E930_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_5dc9bd73_e90d_4a8d_9dcc_548e9255eb96_KHI: EdgeSync EHF synchronization failures._5dc9bd73_e90d_4a8d_9dcc_548e9255eb96_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_FalseInternal
_5DDE84E3_9E33_44B4_986B_5C92CC4DD82D_Forensic: An agent didn't close the MIME stream after handling the event for a message. The message has been rejected. Please report this problem to the agent vendor_5DDE84E3_9E33_44B4_986B_5C92CC4DD82D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5E133AF4_157C_467B_B761_1F45C0A7E0D4_Forensic: OABGen failed to create the directory. One or more offline address books will not be published._5E133AF4_157C_467B_B761_1F45C0A7E0D4_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5e6ba7c6_9e73_43a8_adc7_6aee94ab73e5_KHI: EdgeSync EHF synchronization not configured._5e6ba7c6_9e73_43a8_adc7_6aee94ab73e5_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_FalseInternal
_5E86F2AA_70BE_43BB_AAFD_5C6DEE68D8BB_Forensic: The directory object for this machine has the unexpected serverRole attribute value. OAB will not be generated by this server._5E86F2AA_70BE_43BB_AAFD_5C6DEE68D8BB_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5F0636F8_C38F_4810_AABC_FE8F5A36AC40_Forensic: The Configuration Domain Controller specified in the registry is not available._5F0636F8_C38F_4810_AABC_FE8F5A36AC40_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5F16C48C_89DD_48FC_9652_6CA24B6591BC_Forensic: Outlook Web App failed to parse the Address Book custom properties. Review MSExchange OWA event 34 for the cause. One of the elements isn't valid._5F16C48C_89DD_48FC_9652_6CA24B6591BC_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5F4772DB_86B4_42a2_866D_01859FCD413E_Forensic: User searches failed per minute - sustained for 5 minutes - Yellow(>10)._5F4772DB_86B4_42a2_866D_01859FCD413E_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_5F84A207_4D3A_4F39_96AC_1782D8EED3C7_Forensic: Name Service Provider Interface (NSPI) Proxy cannot contact any global catalogs that support the NSPI Service._5F84A207_4D3A_4F39_96AC_1782D8EED3C7_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_5F965E48_7A9B_4608_9EA5_E6814DF0FA96_Forensic: A POP3 connectivity transaction failure occurred. The specified mailbox database is a recovery mailbox database and won't be monitored._5F965E48_7A9B_4608_9EA5_E6814DF0FA96_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_5FCAB179_73A9_4A6E_913C_3C851D0E04FD_Forensic: Failed to generate the Offline Address Book. The error is specified in the event description._5FCAB179_73A9_4A6E_913C_3C851D0E04FD_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_607B391A_6E69_4EEC_B4E3_CCB9D6220545_Forensic: Couldn't decrypt EdgeSync credentials. Please unsubscribe and then resubscribe your Edge Transport server._607B391A_6E69_4EEC_B4E3_CCB9D6220545_Microsoft.Exchange.2010.EdgeTransportMessageSecurityMicrosoft.Exchange.2010.EdgeTransportMessageSecurity.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_60B83192_436F_47A1_858B_8A11D658A870_Forensic: Exchange can't obtain the fully qualified domain name (FQDN) of the specified Exchange server in the routing tables._60B83192_436F_47A1_858B_8A11D658A870_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_61B1F887_50BA_4592_A904_C47C94C04612_Forensic: The database copy is not searchable on the local server. Another database copy may be searchable if it is mounted on a different server._61B1F887_50BA_4592_A904_C47C94C04612_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_61c1da8f_99a0_4c9f_8620_0e1e1beeeee1_KHI: Partner Voice Message Transcription failures \% over the last 1 hour - Red (> 10)_61c1da8f_99a0_4c9f_8620_0e1e1beeeee1_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PartnerTranscriptionFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_61C5448E_6F6A_4533_AA06_BFF13BAD198F_KHI: An IMAP4 connectivity transaction failure occurred. The NetworkCredential value for the given MailboxCredential is set to null._61C5448E_6F6A_4533_AA06_BFF13BAD198F_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_6286D08F_BE77_4044_97FB_71185659E4CA_Forensic: The connected routing group for the specified connector was not found in the routing tables._6286D08F_BE77_4044_97FB_71185659E4CA_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_6291A285_5155_4DCF_9F99_5F79A8EDC212_Forensic: Rule collection was not loaded because of transient errors._6291A285_5155_4DCF_9F99_5F79A8EDC212_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_62FA6D6E_B004_4abf_A325_4DEEDED1BC57_Forensic: Delivery Failure Resolver 5.4.6 happened over last 5 minutes - Yellow(>1)._62FA6D6E_B004_4abf_A325_4DEEDED1BC57_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_6331da8f_99a0_4c9f_8620_0e1e1bfffff1_KHI: Partner Voice Message Transcription failures \% over the last 1 hour - Yellow (> 5)._6331da8f_99a0_4c9f_8620_0e1e1bfffff1_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PartnerTranscriptionFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_63353018_17FC_404c_8F20_CD3909374E74_KHI: User searches failed per minute - sustained for 5 minutes - Red(>20)._63353018_17FC_404c_8F20_CD3909374E74_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_63467CB8_1022_47E2_9311_186415B50C3B_Forensic: The domain controller isn't running Windows Server 2003 Service Pack 1 or later._63467CB8_1022_47E2_9311_186415B50C3B_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_637d0c52_8127_4597_a3bd_05d85e7549fc_KHI: Apparent configuration problem on a database copy or a file/directory is missing due to a storage failure. Attempted failover failed._637d0c52_8127_4597_a3bd_05d85e7549fc_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_63bfcf42_0b6e_4a57_869a_c0358409fdff_KHI: Federation is not enabled for federated delivery. Federated delivery messages to and from Outlook Live will be affected until this issue is resolved._63bfcf42_0b6e_4a57_869a_c0358409fdff_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_63c1da8f_99a0_4c9f_8620_0e1e1ae2e441_KHI: \% of Messages Successfully Processed Over the Last Hour - Red (< 90)_63c1da8f_99a0_4c9f_8620_0e1e1ae2e441_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PipelineSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_63c1da8f_99a0_4c9f_8620_0e1e1aeeeee1_KHI: Mailbox connection failures \% over the last 1 hour - Red (> 10)_63c1da8f_99a0_4c9f_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.GeneralSensor.MailboxFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_63c1da8f_99a0_4c9f_8620_0e1e1afffff1_KHI: Mailbox connection failures \% over the last 1 hour - Yellow (> 5)._63c1da8f_99a0_4c9f_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.GeneralSensor.MailboxFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_63D442AF_4BAA_456C_AE12_B005598356DB_KHI: Delay DSNs - increase over 60 minutes - Red(>20) - Edge Transport._63D442AF_4BAA_456C_AE12_B005598356DB_Microsoft.Exchange.2010.EdgeTransportDsnSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTrueInternal
_64071F87_FF3D_49ec_85FB_92B9B1D6BDE9_KHI: A POP3 connectivity transaction failure occurred. The specified user isn't unique._64071F87_FF3D_49ec_85FB_92B9B1D6BDE9_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_646B72BA_9696_4A68_BFCA_FD3D44449DC4_KHI: The Test-OutlookConnectivity (Internal) cmdlet failed to run._646B72BA_9696_4A68_BFCA_FD3D44449DC4_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_647EB50A_B70B_4E60_94E1_2189B97A30DF_KHI: The Send connector requires Transport Layer Security before the MailFrom command but the server can't establish TLS._647EB50A_B70B_4E60_94E1_2189B97A30DF_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_64D9CEE7_265A_46f3_9430_C418BE2FC797_Forensic: Transport latency impacted - Unreachable Queue for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>60)._64D9CEE7_265A_46f3_9430_C418BE2FC797_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_650aaf2a_4d51_4a26_88a8_3c1885a3d258_KHI: The Microsoft Exchange Speech Engine service (MSSpeechService) isn't running._650aaf2a_4d51_4a26_88a8_3c1885a3d258_Microsoft.Exchange.2010.UnifiedMessagingServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_653D3B31_DFAE_45c8_A656_2584E4C7B93E_KHI: The database copy is low on database volume space. The volume has reached error levels (16\% free)._653D3B31_DFAE_45c8_A656_2584E4C7B93E_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_654864B7_3DE0_4cb2_98A8_DBB5499EAA89_Forensic: A database copy's incremental reseed files failed to removed._654864B7_3DE0_4cb2_98A8_DBB5499EAA89_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_656C2B58_53AC_4E35_A04E_0122DECCFAF5_KHI: Could not find an accessible writable domain controller for the domain._656C2B58_53AC_4E35_A04E_0122DECCFAF5_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_656e4225_89a2_4b34_b008_621ead0bc777_KHI: A database is approaching its size limit. Exceeding the limit may result in the database becoming unavailable._656e4225_89a2_4b34_b008_621ead0bc777_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_657bac24_5d21_4cc1_9ebb_52c724724b9d_KHI: The Windows Cluster service is not running._657bac24_5d21_4cc1_9ebb_52c724724b9d_Microsoft.Exchange.2010.Mailbox.ClusterServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_6599542B_37E8_4920_85C6_1F98769EE012_Forensic: Unreachable Queue Length - sustained for 5 minutes - Red(>250) - Edge Transport._6599542B_37E8_4920_85C6_1F98769EE012_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_659a0473_5b76_44a0_acc1_4e9597db56f7_KHI: The Exchange information store: RPC Requests - sustained for 5 minutes - Yellow (>750)._659a0473_5b76_44a0_acc1_4e9597db56f7_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_6622af44_b86e_42dd_997b_6c30913c75c8_KHI: \% of Messages Successfully Processed Over the Last Hour - Yellow (< 95)_6622af44_b86e_42dd_997b_6c30913c75c8_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PipelineSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_6637f95b_8681_4ce3_976d_70a7c746e83e_KHI: The Microsoft Exchange Unified Messaging service (MSExchangeUM) isn't running._6637f95b_8681_4ce3_976d_70a7c746e83e_Microsoft.Exchange.2010.UnifiedMessagingServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_666B3A1E_B8C3_40BD_8B91_C48343F5C423_Forensic: A notification of a configuration change has been received but the new configuration couldn't be read. The agent will continue to run with the old configuration._666B3A1E_B8C3_40BD_8B91_C48343F5C423_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_66CCCAD2_7015_4BD5_9666_87CB63DB1DB7_KHI: An error occurred while running the Test-OWAConnectivity (External) cmdlet._66CCCAD2_7015_4BD5_9666_87CB63DB1DB7_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_6739e186_0cdd_4f2d_a805_1dcd0b90a18d_KHI: The database copy is not replicating log files fast enough to keep up with the changes being made to the active database copy._6739e186_0cdd_4f2d_a805_1dcd0b90a18d_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplicationSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_67D1550C_CE16_4511_9A8A_B4287F4E5A8C_Forensic: Couldn't find SRV records for domain controller. The records may not be registered in DNS. Use Dcdiag to verify the DNS server configuration and health._67D1550C_CE16_4511_9A8A_B4287F4E5A8C_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_67FD072F_365A_4786_BD26_47BB093F021A_Forensic: The MessageTracking log file is corrupted. The corrupted file won't be included in the search results._67FD072F_365A_4786_BD26_47BB093F021A_Microsoft.Exchange.2010.CommonTransportLogSearchMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_680454f5_ba49_4028_9025_783d244f939c_KHI: Federated Delivery Decryption agent can't find federation certificate; can't decrypt token. Inbound messages from Outlook Live affected until resolved._680454f5_ba49_4028_9025_783d244f939c_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_683C9285_36CB_4147_92F3_3F37A8EF9211_Forensic: Database copy encountered a serious I/O error (active lost flush) that may have affected all copies of the database._683C9285_36CB_4147_92F3_3F37A8EF9211_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_68CC2444_F30D_42DB_A1E2_1BFC407252D7_KHI: Every Active Directory server in the domain failed to respond._68CC2444_F30D_42DB_A1E2_1BFC407252D7_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_695e51b2_821e_478d_8ea1_d11c0c4a27b6_KHI: At startup, the Microsoft Exchange Replication service cannot enable the Active Manager RPC listener._695e51b2_821e_478d_8ea1_d11c0c4a27b6_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_699393fb_2e93_4b10_b2a5_2fec8f3323aa_KHI: The Microsoft Exchange EdgeSync Service (MSExchangeEdgeSync) isn't running._699393fb_2e93_4b10_b2a5_2fec8f3323aa_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_69ADDBDA_EF22_4223_B9A1_0315E09C49D6_KHI: Failed to complete Autodiscover request via Local Machine FQDN._69ADDBDA_EF22_4223_B9A1_0315E09C49D6_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.FalseInternal
_6AF04C99_F395_4d7c_961F_4CC713B90230_KHI: MSExchangeAssistants Percentage Failed Event Dispatchers - FreeBusy Assistant_6AF04C99_F395_4d7c_961F_4CC713B90230_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_6b542a8e_a6e2_4726_957b_072371484126_Forensic: EdgeSync MSERV synchronization warnings._6b542a8e_a6e2_4726_957b_072371484126_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_FalseInternal
_6B7C0422_4217_4858_BD0A_BBACA422C0ED_KHI: MSExchangeAssistants Percentage Failed Event Dispatchers - Resource Booking Assistant_6B7C0422_4217_4858_BD0A_BBACA422C0ED_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_6bfca569_c29d_47bb_8870_b6afc1787a2d_Forensic: Mail submission service did not successfully initialize._6bfca569_c29d_47bb_8870_b6afc1787a2d_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_6cb2df1a_c5ed_42bc_955e_4439868ea1ab_KHI: The Microsoft Exchange Replication service appears to be leaking operating system handles._6cb2df1a_c5ed_42bc_955e_4439868ea1ab_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_6D095290_B8D4_430E_A8CC_4A5AA09EC28C_KHI: MSExchangeFDS:OAB: Download Task Queued - sustained for 10 hours - Red (>1)._6D095290_B8D4_430E_A8CC_4A5AA09EC28C_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_6DDF3588_592B_42B1_BF10_D607EDD2B181_Forensic: The site monitor failed in its attempt to check the current site name._6DDF3588_592B_42B1_BF10_D607EDD2B181_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_6E9D38F1_5562_440c_8925_7E7C84F7DD98_Forensic: Failed to release Operations Manager resources._6E9D38F1_5562_440c_8925_7E7C84F7DD98_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_6EB7643F_6A2F_4D31_B751_8AB49D1C1733_KHI: There's an error in your Outlook Web App configuration. The configuration for a virtual directory couldn't be found._6EB7643F_6A2F_4D31_B751_8AB49D1C1733_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_6EC31438_9763_4aa3_B622_6860400F8F32_KHI: An IMAP4 connectivity transaction failure occurred. The Exchange Information Store service isn't running._6EC31438_9763_4aa3_B622_6860400F8F32_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_6ECC6A57_02AA_4a44_9651_BD362A8BEFEE_Forensic: Exchange Control Panel detected an unhandled exception during a script resource request. Review MSExchange Control Panel event 21 for the cause._6ECC6A57_02AA_4a44_9651_BD362A8BEFEE_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_705A7A7D_A2EC_4f10_8356_4759281BC316_KHI: Largest Delivery Queue Length - sustained for 30 minutes - Red(>250) - Hub Transport._705A7A7D_A2EC_4f10_8356_4759281BC316_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_706E1294_717C_4C3E_B012_9215E3006167_KHI: Failed to execute the Test-MAPIConnectivity diagnostic cmdlet._706E1294_717C_4C3E_B012_9215E3006167_Microsoft.Exchange.2010.MailboxTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_70e71218_af11_40cc_88fd_63e95222cafa_KHI: The Microsoft Exchange Forms-Based Authentication service (MSExchangeFBA) isn't running._70e71218_af11_40cc_88fd_63e95222cafa_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_7185DCCC_3F7B_4154_9BC0_B458283035A8_Forensic: The Exchange Active Directory Provider couldn't find an available domain controller in the domain._7185DCCC_3F7B_4154_9BC0_B458283035A8_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_71918D83_D32A_4F69_9CAB_0C81B0B6EB49_Forensic: The maximum allowable execution time of the agent was exceeded._71918D83_D32A_4F69_9CAB_0C81B0B6EB49_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_71b8b5cf_56e5_4e59_895a_ead6492a11e7_KHI: The local database copy has more user load than it can support. Users need to be moved to a different database and/or server._71b8b5cf_56e5_4e59_895a_ead6492a11e7_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_71DBF17D_89CA_4BEB_8D72_C31D8DE3480A_Forensic: Name Service Provider Interface (NSPI) Proxy encountered an error when stopping._71DBF17D_89CA_4BEB_8D72_C31D8DE3480A_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_722DC53B_79FB_4027_9A36_3D76E2810001_KHI: A POP3 connectivity transaction failure occurred. The mailbox database isn't unique._722DC53B_79FB_4027_9A36_3D76E2810001_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_72F40021_BD5A_4FFE_B0B3_9509D7A10586_Forensic: No source routing group was found in the routing tables for the specified connector with connected routing groups._72F40021_BD5A_4FFE_B0B3_9509D7A10586_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_743131E4_11B7_43f5_A26B_8D4CC53BE99E_KHI: The Exchange store database: RPC Averaged Latency - sustained for 5 minutes - Red (>70 msec)._743131E4_11B7_43f5_A26B_8D4CC53BE99E_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_743e99e4_f494_4e2e_877c_b43d3a5784e6_KHI: A reseed operation (Update-MailboxDatabaseCopy) is required due to a detected error in the database copy; the copy is failed and suspended._743e99e4_f494_4e2e_877c_b43d3a5784e6_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_74507768_d9d8_4b18_9fb7_5a5705726dd0_KHI: The Exchange information store has used 90\% of available connections._74507768_d9d8_4b18_9fb7_5a5705726dd0_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_752C72C3_7A6E_49DC_8120_F5AFF115D2BF_KHI: Exchange is unable to start the Microsoft Exchange Anti-spam Update Service._752C72C3_7A6E_49DC_8120_F5AFF115D2BF_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_75CD1165_1F7E_4B8C_A7F0_DE0EAA53137C_KHI: ActiveSync connectivity (Internal) transaction failures._75CD1165_1F7E_4B8C_A7F0_DE0EAA53137C_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_7663dd96_cec2_4e20_a046_e4a37d8e0ab4_KHI: A failure that may impact all copies of a database was detected; the local copy terminate replication or dismount._7663dd96_cec2_4e20_a046_e4a37d8e0ab4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_76768367_7459_4C25_8BA2_427D546124AA_KHI: The Outlook Web App proxy failed to verify access for the account used by the Exchange Client Access server._76768367_7459_4C25_8BA2_427D546124AA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_769983AD_9EB2_4526_B5FD_0559A373B300_KHI: Failed Availability Service requests to External Hostnames._769983AD_9EB2_4526_B5FD_0559A373B300_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972001_KHI: TCP Connectivity Against Local Server - Address Book failure (NSPI)_76aaf2ee_f134_4f0e_925f_8f9cc0972001_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972002_KHI: TCP Connectivity Against Local Server - Address Book failure (ABREF)_76aaf2ee_f134_4f0e_925f_8f9cc0972002_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972003_KHI: TCP Connectivity Against Local Server - RPC Client Access failure (Connect)_76aaf2ee_f134_4f0e_925f_8f9cc0972003_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972004_KHI: TCP Connectivity Against Local Server - RPC Client Access failure (Logon)_76aaf2ee_f134_4f0e_925f_8f9cc0972004_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972005_KHI: TCP Connectivity Against Local Server - Unexpected Exception_76aaf2ee_f134_4f0e_925f_8f9cc0972005_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972006_Forensic: HTTP Connectivity Against Local Server - Address Book failure (NSPI)_76aaf2ee_f134_4f0e_925f_8f9cc0972006_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972007_Forensic: HTTP Connectivity Against Local Server - Address Book failure (ABREF)_76aaf2ee_f134_4f0e_925f_8f9cc0972007_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972008_Forensic: HTTP Connectivity Against Local Server - Autodiscover failure_76aaf2ee_f134_4f0e_925f_8f9cc0972008_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc0972009_Forensic: HTTP Connectivity Against Local Server - RPC Client Access failure (Connect)_76aaf2ee_f134_4f0e_925f_8f9cc0972009_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc097200A_Forensic: HTTP Connectivity Against Local Server - RPC Client Access failure (Logon)_76aaf2ee_f134_4f0e_925f_8f9cc097200A_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76aaf2ee_f134_4f0e_925f_8f9cc097200B_Forensic: HTTP Connectivity Against Local Server - Unexpected Exception_76aaf2ee_f134_4f0e_925f_8f9cc097200B_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerMicrosoft.Exchange.2010.ClientAccessOutlookLocalServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_FalseInternal
_76D81B36_60B2_4DE5_AFAC_BCC678E8715A_NonServiceImpacting: There was an Outlook Web App connectivity (Internal) transaction failure. The Test-OWAConnectivity cmdlet must be run on a Client Access server._76D81B36_60B2_4DE5_AFAC_BCC678E8715A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_774fb26e_ca79_43d3_9250_9029291b4f62_KHI: The Microsoft Exchange Replication service was not able to enable the Active Manager RPC listener._774fb26e_ca79_43d3_9250_9029291b4f62_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_775A3378_0CE9_11DB_9607_00E08161165F_Forensic: The state of IMAP4 connectivity couldn't be detected._775A3378_0CE9_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigMicrosoft.Exchange.2010.ClientAccessTestConfig.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_775C91B2_92FC_4B25_8D92_4BB267B641A1_KHI: The file that lists the mobile operators and their capabilities can't be found_775C91B2_92FC_4B25_8D92_4BB267B641A1_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_788E0D6A_1FDB_4BF6_9841_4F6B9F3D10B9_Forensic: The DsProxy service failed to start._788E0D6A_1FDB_4BF6_9841_4F6B9F3D10B9_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_78C38024_8CEE_48b6_B2C1_634B8AF08FE3_Forensic: Local database copy encountered a serious I/O error (active lost flush) that may have affected all copies of the database._78C38024_8CEE_48b6_B2C1_634B8AF08FE3_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_78D885FA_C48F_4A19_A90B_E131CA2F1064_KHI: An error occurred while the Test-UMConnectivity (Local Voice) cmdlet was running._78D885FA_C48F_4A19_A90B_E131CA2F1064_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_78e4a123_a361_47aa_b0f4_913db59996b0_KHI: The database copy has more user load than it can support. Users need to be moved to a different database and/or server._78e4a123_a361_47aa_b0f4_913db59996b0_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_791FB07F_5509_4f37_8A0F_24E442EA61D6_KHI: A POP3 connectivity transaction failure occurred. The NetworkCredential value for the given MailboxCredential is set to null._791FB07F_5509_4f37_8A0F_24E442EA61D6_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_792840D3_8691_4B1C_BCA5_1514C7574B4C_Forensic: Failed to copy file._792840D3_8691_4B1C_BCA5_1514C7574B4C_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_79928159_A6C8_4e47_9CB6_20484A3BBB01_Forensic: Transport latency impacted - Replay for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._79928159_A6C8_4e47_9CB6_20484A3BBB01_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_799A169F_CC86_4a75_8A84_6C68A7DF9BCE_KHI: MSExchangeAssistants Percentage Failed Event Dispatchers - Calendar Assistant_799A169F_CC86_4a75_8A84_6C68A7DF9BCE_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_79CB1AB7_6002_4580_B0AF_66A2F4415F2A_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._79CB1AB7_6002_4580_B0AF_66A2F4415F2A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_7A7FE8D1_76A9_45B2_9A9D_773492016D2E_KHI: The Tranport service failed to create the Pickup directory. Pickup won't function until the directory is created._7A7FE8D1_76A9_45B2_9A9D_773492016D2E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7ABE92F0_EC3D_4122_A2FC_069CBA12988E_Forensic: The configuration for verifying cross-forest requests wasn't found in Active Directory._7ABE92F0_EC3D_4122_A2FC_069CBA12988E_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7B4F781F_6DA8_4075_A8BD_E9C528AEAFBD_Forensic: The maximum allowable number of retries to load routing configuration data has been reached. The service will be stopped._7B4F781F_6DA8_4075_A8BD_E9C528AEAFBD_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7B9487E8_0CA9_49BD_821E_8922917C4A7B_Forensic: System Attendant detected that the local computer is not a member of the group._7B9487E8_0CA9_49BD_821E_8922917C4A7B_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7BCF323A_77B0_4F01_BD12_6CF57AC904BC_Forensic: One of the System Attendant's tasks is blocked._7BCF323A_77B0_4F01_BD12_6CF57AC904BC_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7C01E7A3_4D1C_4a3c_BB2A_434DF2BA5C19_Forensic: Delivery Failure DeliveryAgent happened over last 5 minutes - Yellow(>5)._7C01E7A3_4D1C_4a3c_BB2A_434DF2BA5C19_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_7C1D3115_4C58_4872_BF8B_23E8631E0C7A_NonServiceImpacting: Couldn't categorize a non-expirable message._7C1D3115_4C58_4872_BF8B_23E8631E0C7A_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7C5683A7_75E4_478A_9468_94B63424CD7B_Forensic: Initialization of inbound authentication failed with an error for a Receive connector._7C5683A7_75E4_478A_9468_94B63424CD7B_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7C898FD4_3E14_46EA_AF26_43C799A030B5_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._7C898FD4_3E14_46EA_AF26_43C799A030B5_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_7CB0A86C_C192_4B0F_B0EA_C9690E86F144_KHI: OABGen failed to download the files currently in the offline address book. This OAB will not be generated._7CB0A86C_C192_4B0F_B0EA_C9690E86F144_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7CB597F4_2A22_4a2a_9E54_1682F28C4563_KHI: The database copy is not replicating log files fast enough for the last 30 minutes to keep up with the changes being made to the active database copy._7CB597F4_2A22_4a2a_9E54_1682F28C4563_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplicationSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_7CE0EEFE_0885_4603_8279_3221BEDC7FB9_Forensic: A transient error occurred while accessing Active Directory._7CE0EEFE_0885_4603_8279_3221BEDC7FB9_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7CE8405C_4907_44DA_930E_7429C62FEE60_KHI: System Attendant was unable to find the Exchange server object in the Active Directory._7CE8405C_4907_44DA_930E_7429C62FEE60_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7ce9c65b_2eab_4732_bb62_2b22be8fb478_KHI: The passive database copy is experiencing a critically high log file read latency. The rate is sustained for at least 5 minutes._7ce9c65b_2eab_4732_bb62_2b22be8fb478_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_7D58B9DA_5B20_4B9F_8D47_D2B75381E40A_Forensic: A non-SMTP gateway connection failure has occurred: The drop directory doesn't have the correct access permissions._7D58B9DA_5B20_4B9F_8D47_D2B75381E40A_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7DCC252D_3D32_49AC_9E92_875433B59DE3_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 8 for the cause._7DCC252D_3D32_49AC_9E92_875433B59DE3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_7E9BC663_79A3_41D3_A4B6_073B2A59CC1E_Forensic: The configuration for one of the SMTP Receive connectors is invalid. The configuration change will be ignored, and the last good configuration will be used._7E9BC663_79A3_41D3_A4B6_073B2A59CC1E_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_7F4931DB_AAE6_4916_8AEB_396B14E1D342_Forensic: Transport latency impacted - percent messages completing categorization over last 30 min - Yellow(<90)._7F4931DB_AAE6_4916_8AEB_396B14E1D342_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_7fe1f916_14f8_4eae_8ccd_0a9ab60a13a3_Forensic: The local topology server does not belong to any Active Directory site._7fe1f916_14f8_4eae_8ccd_0a9ab60a13a3_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_800D036E_8C76_4AD4_922F_8AB332452EC6_Forensic: Active Remote Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._800D036E_8C76_4AD4_922F_8AB332452EC6_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_801d4070_d4cd_4f92_aecc_607d7f4a3061_KHI: An uncorrectable failure exists in a database copy; it may terminate replication or dismount._801d4070_d4cd_4f92_aecc_607d7f4a3061_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_80CC9FB5_2ABA_4E14_8F9E_84871928CBE8_Forensic: Exchange ActiveSync has detected that the minimum heartbeat interval is set to a value that is higher than the maximum heartbeat interval._80CC9FB5_2ABA_4E14_8F9E_84871928CBE8_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_80d898e6_58fe_45e1_9c04_0ba31357b532_KHI: Monitoring failed to run the Test-MRSHealth cmdlet._80d898e6_58fe_45e1_9c04_0ba31357b532_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_8102B570_A7BC_47a3_9F9B_F1EDCBBE00A5_KHI: Availability Service Initialization Failure_8102B570_A7BC_47a3_9F9B_F1EDCBBE00A5_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_811335AC_437D_4B1F_B6B7_A30AEDC94B38_Forensic: The Content Filter wrapper didn't respond to the last message._811335AC_437D_4B1F_B6B7_A30AEDC94B38_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8127E33B_C8EC_49e7_A976_4C415463B2DB_KHI: Transport latency impacted - 99th percentile of messages not meeting SLA over last 30 min - Red(>90)._8127E33B_C8EC_49e7_A976_4C415463B2DB_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_818E82C9_0951_4A98_8D2F_CA3A1EEDE78B_Forensic: EdgeSync failed to confirm the credentials for a replication account on a subscription server._818E82C9_0951_4A98_8D2F_CA3A1EEDE78B_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_81D62428_59B8_4e80_BAB3_1320293DBEB0_Forensic: Transport latency impacted - 99th percentile of messages not meeting SLA over last 15 min - Yellow(>90)._81D62428_59B8_4e80_BAB3_1320293DBEB0_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_820ED382_E094_416B_9E14_C913EB331EB7_Forensic: The file version of the third-party proxy address DLL file installed on the local server is not current._820ED382_E094_416B_9E14_C913EB331EB7_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_82109CA0_7A80_4e18_A3BB_764447A820E7_KHI: A POP3 connectivity transaction failure occurred. The Microsoft Exchange Information Store service isn't running._82109CA0_7A80_4e18_A3BB_764447A820E7_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_821F49EA_F9CA_4D46_8E81_BA540AC6056C_KHI: The Content Filter agent couldn't be initialized because notification of the file system change couldn't be initialized._821F49EA_F9CA_4D46_8E81_BA540AC6056C_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_82E5612C_0C3B_4f56_90F1_5AA01E3E71DE_KHI: Federated Delivery Message Decryption Impacted - More Than 90\% Messages Failed to Decrypt During Cross-premise Decryption over last 30 minutes - Red(>90)._82E5612C_0C3B_4f56_90F1_5AA01E3E71DE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_83AA8423_3FE6_4a85_A9CF_02EC5F4ECF54_KHI: ExchangeSearch Zero Results Queries: greater than or equal 100_83AA8423_3FE6_4a85_A9CF_02EC5F4ECF54_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_8441B9CF_421B_4ebd_9528_CEE1A33C7C26_KHI: An IMAP4 connectivity transaction failure occurred. The specified server version is older than the currently-supported versions._8441B9CF_421B_4ebd_9528_CEE1A33C7C26_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_84AE8F80_29AA_4145_94DE_A9A26F9C5756_Forensic: Error while running Set-CasConnectivityTestCredentials_84AE8F80_29AA_4145_94DE_A9A26F9C5756_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringMicrosoft.Exchange.2010.Mailbox.MailboxMonitoring.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceNonStatefulEventUnitMonitorType.Execute_set_CasConnectivityCredentials_cmdlet.TrueInternal
_84E82081_5A14_4B62_BCD5_58F0B837FC36_Forensic: The target routing group wasn't found for this routing group connector in the routing tables. The connector will be skipped._84E82081_5A14_4B62_BCD5_58F0B837FC36_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_84EC6494_E9E3_48b7_8313_FE9E72A44DA7_Forensic: Number of outstanding requests - sustained for 5 minutes - Red(>100)._84EC6494_E9E3_48b7_8313_FE9E72A44DA7_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_84ec6e7b_f48e_4151_af19_fbee01bf02bf_KHI: The database copy is low on log volume space. The volume has reached error levels (35\% free)._84ec6e7b_f48e_4151_af19_fbee01bf02bf_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_84FE9480_5FE6_4261_A015_F96B4CFDA40E_Forensic: Poison Queue Length - sustained for 5 minutes - Red(>5) - Edge Transport._84FE9480_5FE6_4261_A015_F96B4CFDA40E_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_857d3ecf_3f75_4ddc_8b6f_0f9b0776436e_KHI: A memory allocation failure impacted a local database copy; the copy will probably terminate replication or dismount._857d3ecf_3f75_4ddc_8b6f_0f9b0776436e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_85904634_3C94_4E81_B48C_32EED49AA880_KHI: An Exchange ActiveSync connectivity (Internal) transaction failure occurred. The test credentials can't be used to test Exchange ActiveSync._85904634_3C94_4E81_B48C_32EED49AA880_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_859A01ED_F400_48BE_85EB_C59A51E4E48A_Forensic: DSAccess returned an error during an Active Directory notification. System Attendant will try to perform the Active Directory notification at a later time._859A01ED_F400_48BE_85EB_C59A51E4E48A_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_85B5FBAB_8D95_41F5_9468_3BADDEF3A004_Forensic: The account provided valid credentials; however, it is not authorized to use the server to submit mail to SMTP, so the authentication has failed._85B5FBAB_8D95_41F5_9468_3BADDEF3A004_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_85CE1B27_48C3_4ABD_B5CE_D6780221E34A_KHI: The Content Filter agent couldn't be initialized. There may be corrupted files._85CE1B27_48C3_4ABD_B5CE_D6780221E34A_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_860D6DF5_8D79_445F_AE4F_44F5B5666F5F_Forensic: The Routing tables failed to load because Active Directory is unavailable. The system will continue to use the old instance if there is one._860D6DF5_8D79_445F_AE4F_44F5B5666F5F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8613C2DF_0D14_4357_814C_90B6BD1894D9_Forensic: File Distribution Service: Failed to read from metabase because specified metabase object could not be found. OAB synchronization suspended._8613C2DF_0D14_4357_814C_90B6BD1894D9_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_863F7827_978A_4CB9_978C_A6FF7E8B53EB_Forensic: An EdgeSync synchronization process couldn't start because the configuration data didn't pass validation._863F7827_978A_4CB9_978C_A6FF7E8B53EB_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_86C3967B_1BB5_4d03_9E8E_8CC899E858C9_KHI: The Microsoft Exchange Assistants Service startup is being delayed due to continuous crashes_86C3967B_1BB5_4d03_9E8E_8CC899E858C9_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_86F63956_43FF_49ea_8373_0883D4874172_KHI: A Unified Messaging server couldn't be located to handle the call for a particular mailbox._86F63956_43FF_49ea_8373_0883D4874172_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8701759B_F388_4E58_8476_0329812DE7DB_Forensic: Unable to retreive the server security descriptor._8701759B_F388_4E58_8476_0329812DE7DB_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8776E3FC_7BCB_46A7_92E3_667749050936_KHI: Failed to execute the Test-OWAConnectivity (External) diagnostic cmdlet._8776E3FC_7BCB_46A7_92E3_667749050936_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_8781d6b6_2efa_488e_80ac_8e2e794e0236_KHI: Corruption that can be corrected via a reseed exists in a database copy; it may terminate replication or dismount._8781d6b6_2efa_488e_80ac_8e2e794e0236_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_87FB9372_E942_465E_9853_2D7888A06224_Forensic: File Distribution Service: Active Directory contains invalid configuration object._87FB9372_E942_465E_9853_2D7888A06224_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_88D08786_4C79_4A61_A8ED_16AE23655E5F_Forensic: An exception occured while loading the required EdgeSync credentials. Run the Test-EdgeSynchronization cmdlet on the Hub Transport server._88D08786_4C79_4A61_A8ED_16AE23655E5F_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_88E477DB_10E0_433a_9D5C_0157151B99E3_KHI: An IMAP4 connectivity transaction failure occurred. The Mailbox database wasn't found._88E477DB_10E0_433a_9D5C_0157151B99E3_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_894EB526_B34B_4BEB_B76D_381AABC89198_KHI: Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objects in Active Directory._894EB526_B34B_4BEB_B76D_381AABC89198_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_89B44157_6A3B_48b2_BB1A_840D3F436F05_Forensic: Transport latency impacted - SMTP Send Connect for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._89B44157_6A3B_48b2_BB1A_840D3F436F05_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_8A3B81E1_F950_4906_8D29_916C819BF215_Forensic: Largest Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._8A3B81E1_F950_4906_8D29_916C819BF215_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_8AF89FE9_EA0C_4CE6_85A5_54A9BABA9606_Forensic: Exchange was unable to successfully use the Microsoft Update agent._8AF89FE9_EA0C_4CE6_85A5_54A9BABA9606_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8B3EBD35_BF76_4802_8C43_60352427688A_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to a LogSessionManager startup error._8B3EBD35_BF76_4802_8C43_60352427688A_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8B87857E_7132_47AE_99B6_A70270773064_Forensic: Proxy encountered an error while receiving a packet. The target domain controller, the network, or a client might be down._8B87857E_7132_47AE_99B6_A70270773064_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8C0F94D7_9E08_4E8E_AE14_CD7986393C03_Forensic: No source Hub Transport servers or home MTA server set for the specified connector could be found in the routing tables._8C0F94D7_9E08_4E8E_AE14_CD7986393C03_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8C636AD1_7292_415D_B985_0EE9DA051D7D_KHI: There is no default authoritative domain or the domain name is empty._8C636AD1_7292_415D_B985_0EE9DA051D7D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8C8C8968_3E1B_4444_9416_C58497ED0255_Forensic: The Exchange Active Directory Provider didn't find any domain controllers._8C8C8968_3E1B_4444_9416_C58497ED0255_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8CB6F826_0099_486d_9D0B_CF4EEF4BEB67_KHI: The database copy isn't replaying log files fast enough for the last two hours to keep up or catch up with the changes being made to the active database copy._8CB6F826_0099_486d_9D0B_CF4EEF4BEB67_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplaySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_8cc22dd1_2b36_4568_acdc_cc0121aa3af1_KHI: The Exchange information store: RPC Requests - sustained for 5 minutes - Red (>1000)._8cc22dd1_2b36_4568_acdc_cc0121aa3af1_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_8CED50B4_B8FB_434D_B190_2810F02E6238_Forensic: Unable to generate an e-mail address. The address type was returned by address generation DLL._8CED50B4_B8FB_434D_B190_2810F02E6238_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8D3280FE_5F90_4CAC_96A3_E4E92DB42B69_Forensic: The directory server specified in the registry wasn't found in the Sites container in Active Directory, so the AD Provider won't use this server._8D3280FE_5F90_4CAC_96A3_E4E92DB42B69_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8D36B31E_A62C_4d06_BE85_656CC2B4A69B_Forensic: The database engine has consumed 99\% of the "b-trees" resource (87048 used out of a maximum of 87696) for the database._8D36B31E_A62C_4d06_BE85_656CC2B4A69B_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8D3C353A_4246_47D8_B691_D8703E02DAEB_Forensic: Operation Manager is unable to stop the Microsoft Exchange Anti-spam Update Service._8D3C353A_4246_47D8_B691_D8703E02DAEB_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8D4EE88A_1984_4F99_8A64_1C4ACC66F401_Forensic: A Non-SMTP Gateway Connection failure has occurred on the specified connector: the drop directory does not exist._8D4EE88A_1984_4F99_8A64_1C4ACC66F401_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8D8836D8_A875_4873_8DE3_B76B234A6F14_Forensic: A LDAP search call failed. Ignore this error if there are no related events. Review the Application log and check for network connectivity issues._8D8836D8_A875_4873_8DE3_B76B234A6F14_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8DB2CABB_EC85_4D83_BFC5_2A67DC727773_KHI: Rule collection was not loaded because of configuration errors. Messages will be deferred._8DB2CABB_EC85_4D83_BFC5_2A67DC727773_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8E06CE1D_CC75_4E36_85D3_B08D0252CB51_KHI: Could not establish a secure LDAP connection to the server. The domain controller is not running Windows 2000 SP3 or later._8E06CE1D_CC75_4E36_85D3_B08D0252CB51_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8E22587D_0A9D_43F8_A502_B99170785DE4_Forensic: The transport process couldn't remove poison message information from the registry. Access to the registry failed with the specified error._8E22587D_0A9D_43F8_A502_B99170785DE4_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8E614AB3_C7BD_4BBF_A258_BEA769975ED6_Forensic: File Distribution Service: Failed to read property from metabase object. OAB synchronization suspended._8E614AB3_C7BD_4BBF_A258_BEA769975ED6_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8E89F544_FA79_4777_BBA1_A1F877F9779A_Forensic: File Distribution Service: Active Directory contains invalid value for PollInterval attribute of OAB Virtual Directory object._8E89F544_FA79_4777_BBA1_A1F877F9779A_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8F3A99D9_03BD_4513_BC78_1C1EA990D2BD_Forensic: The topology doesn't contain a route to the server in the Active Directory site in the routing tables._8F3A99D9_03BD_4513_BC78_1C1EA990D2BD_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_8f635dac_9cf6_423d_8455_16c8ca9ee974_KHI: A database experienced a hard I/O error in NTFS. NTFS failed to allow the creation of a file as part of a failover._8f635dac_9cf6_423d_8455_16c8ca9ee974_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9019BCD5_F717_4D62_944F_447F314E005F_Forensic: The Exchange Active Directory Provider couldn't read an attribute from the root DSE of the Active Directory server._9019BCD5_F717_4D62_944F_447F314E005F_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_90426B07_E58E_465C_8EF3_19397C90EAAD_Forensic: Outlook Web App couldn't parse the Address Book custom properties. Review MSExchangeOWA event 33 for the cause._90426B07_E58E_465C_8EF3_19397C90EAAD_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_90943DBD_2206_4CF2_BF23_69ABE5EF38B3_Forensic: The Sender isn't valid. The StoreDriver event will be ignored._90943DBD_2206_4CF2_BF23_69ABE5EF38B3_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_910D50D7_2EE9_4CE0_A573_D3008423AE85_Forensic: Exchange was unable to register the service principal name._910D50D7_2EE9_4CE0_A573_D3008423AE85_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_91621ee3_d3ec_4c9b_984a_8edeef4edc24_KHI: The Microsoft Exchange Replication service is not running._91621ee3_d3ec_4c9b_984a_8edeef4edc24_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_917AAB0B_70E3_4FD2_A307_36B85F71D1BA_Forensic: OABGen couldn't generate full details for some entries in the offline address book._917AAB0B_70E3_4FD2_A307_36B85F71D1BA_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_91A904EA_8961_42FB_A089_5683F49E735C_Forensic: The Send connector has failed to authenticate with the remote server._91A904EA_8961_42FB_A089_5683F49E735C_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_91A99B27_50E2_4309_9AD9_0FA9344F8715_Forensic: Unable to create directory._91A99B27_50E2_4309_9AD9_0FA9344F8715_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_91CBF52A_13DD_4337_88EB_F629C150100D_KHI: Delivery Failure Delivery-StoreDriver 5.2.0 happened over last 5 minutes - Yellow(>2)._91CBF52A_13DD_4337_88EB_F629C150100D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_9248222D_7A73_469d_98D3_F6A5EB1EAB25_KHI: An error occurred during an Mserv lookup._9248222D_7A73_469d_98D3_F6A5EB1EAB25_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_925d1fb0_a86e_4522_b9ba_dc2b165734eb_KHI: The average MSExchange RpcClientAccess request is taking longer than the allotted threshold. This is negatively affecting the Outlook experience._925d1fb0_a86e_4522_b9ba_dc2b165734eb_Microsoft.Exchange.2010.ClientAccessOutlookInstancePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_925d1fb0_a86e_4522_b9ba_dc2b165734ef_KHI: MSExchange RpcClientAccess Per Server RPC Average Latency (Backend) - sustained for 15 minutes - Red (>225)_925d1fb0_a86e_4522_b9ba_dc2b165734ef_Microsoft.Exchange.2010.ClientAccessOutlookInstancePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_925d1fb0_a86e_4522_b9ba_dc2b165734f3_KHI: MSExchange RpcClientAccess Per Server RPC Failed Backend Connections - sustained for 5 minutes - Red (>2)_925d1fb0_a86e_4522_b9ba_dc2b165734f3_Microsoft.Exchange.2010.ClientAccessOutlookInstancePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_925d1fb0_a86e_4522_b9ba_dc2b165734f7_KHI: MSExchange RpcClientAccess Per Server RPC Active Backend Connections (\% of Limit) - sustained for 15 minutes - Red (>98)_925d1fb0_a86e_4522_b9ba_dc2b165734f7_Microsoft.Exchange.2010.ClientAccessOutlookInstancePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_92D27124_8067_47D1_BC12_E2C6515A3BD1_KHI: Outlook Web App failed to initialize. A referenced forms registry folder doesn't exist. Review MSExchangeOWA event 1 for the cause._92D27124_8067_47D1_BC12_E2C6515A3BD1_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_93558cf0_e063_45b1_b57a_0d4b53e0d615_KHI: The Microsoft Exchange Information Store service (MSExchangeIS) is not running._93558cf0_e063_45b1_b57a_0d4b53e0d615_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_93902FED_EBE0_4A00_9194_300898AC7BE9_Forensic: A DNS failure occurred at the Send connector. See the associated diagnostic informaton._93902FED_EBE0_4A00_9194_300898AC7BE9_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_945b8fdf_a054_4de6_b26f_91763081252a_KHI: The database availability group is experiencing problems that may cause it to eventually fail due to stale security information._945b8fdf_a054_4de6_b26f_91763081252a_Microsoft.Exchange.2010.Mailbox.ClusterFswSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_94886AEA_F111_4B28_900B_65869E4AD0A4_Forensic: There was an error loading the journaling agent configuration._94886AEA_F111_4B28_900B_65869E4AD0A4_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9515A8CC_ECBC_495B_BE8C_2558D99F82E9_KHI: Exchange Control Panel connectivity (External) transaction warnings._9515A8CC_ECBC_495B_BE8C_2558D99F82E9_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_951E0097_359B_4098_B401_ED08E73F0D2F_KHI: The service failed to start because of a problem with one of its dependencies._951E0097_359B_4098_B401_ED08E73F0D2F_Microsoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTrueInternal
_958FB7AC_9DF6_45E4_8991_7EDD6D78FB64_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to a message tracking log error._958FB7AC_9DF6_45E4_8991_7EDD6D78FB64_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_959F10A7_6010_40BD_A18A_58FF28AF1C98_KHI: An error occurred while running the Test-WebServicesConnectivity cmdlet in internal mode._959F10A7_6010_40BD_A18A_58FF28AF1C98_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_95A7E512_E281_4282_A3F8_D03250D0AFEE_KHI: A non-transient error blocked replication startup of a database copy._95A7E512_E281_4282_A3F8_D03250D0AFEE_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_95AF3CD8_CC5E_472F_8E7F_40FC5F3007FA_KHI: WebReady Document Viewing isn't registered. To correct this problem, reinstall Outlook Web App._95AF3CD8_CC5E_472F_8E7F_40FC5F3007FA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_95D89044_653C_43F7_997E_420A313224B4_KHI: Outlook Web App connectivity (Internal) transaction warnings._95D89044_653C_43F7_997E_420A313224B4_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_96BF6DEF_0EA2_4E8A_897E_4CDEB9FBABDF_Forensic: An unexpected error occurred while retrieving data from the Autodiscover service._96BF6DEF_0EA2_4E8A_897E_4CDEB9FBABDF_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9705283E_8972_4898_BB23_27CD76750386_KHI: There was an Outlook Web App connectivity (Internal) transaction failure. The Client Access server configuration check failed._9705283E_8972_4898_BB23_27CD76750386_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_9770509D_8C25_4D32_AC28_EA45C505C2C1_Forensic: LDAP Search Timeouts - sustained for 5 minutes - Yellow(>10)._9770509D_8C25_4D32_AC28_EA45C505C2C1_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_978B00BA_E283_4F88_AD5E_F59D7EEE3342_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 22 for the cause._978B00BA_E283_4F88_AD5E_F59D7EEE3342_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_97ca310c_fe3b_44ab_ac3b_06642541ea03_Forensic: Unable to load the performance counters for the Microsoft Exchange Mail Submission Service. The respective Performance object is named MSExchangeMail Submission._97ca310c_fe3b_44ab_ac3b_06642541ea03_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_98042037_5FA8_42eb_B181_382ECC6665F1_KHI: The database copy is low on database volume space. The volume has reached critical levels (8\% free)._98042037_5FA8_42eb_B181_382ECC6665F1_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_98333493_9606_4306_B5FE_B068420C907D_Forensic: Referral Interface cannot contact any global catalog server that supports the NSPI Service._98333493_9606_4306_B5FE_B068420C907D_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9839A528_6F4E_4A4D_A2ED_29ACD5A089C3_Forensic: An unexpected System Attendant error occurred. Review the event description for the error that was logged._9839A528_6F4E_4A4D_A2ED_29ACD5A089C3_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_99781086_94d4_4aad_8c1b_9c6bc57caae1_KHI: A memory allocation failure impacted a database copy; the copy will probably terminate replication or dismount._99781086_94d4_4aad_8c1b_9c6bc57caae1_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_9AB6DDEC_E366_419b_82C7_04C1EB53B5BD_Forensic: The Exchange store database: RPC Average Latency - sustained for 5 minutes - Yellow (>50 msec)._9AB6DDEC_E366_419b_82C7_04C1EB53B5BD_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_9ACE2DDD_B5D7_46C0_8536_6015B9F51EDE_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._9ACE2DDD_B5D7_46C0_8536_6015B9F51EDE_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_9b01490a_8fc6_474d_a990_67101678a288_Forensic: Databases were moved while the Test-MAPIConnectivity cmdlet was running on this server._9b01490a_8fc6_474d_a990_67101678a288_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringMicrosoft.Exchange.2010.Mailbox.MailboxMonitoring.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_9B2C8BA1_4495_49C0_AC0B_7D603DD8AA1C_Forensic: Exchange Direct Push has detected that the maximum heartbeat interval is set to a value that is greater than the maximum allowable value._9B2C8BA1_4495_49C0_AC0B_7D603DD8AA1C_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9c2ec8a8_4c05_4977_be28_6a4a89ccd23c_KHI: A performance problem impacted a local database copy's storage; client performance may be impacted._9c2ec8a8_4c05_4977_be28_6a4a89ccd23c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyIntegritySuppressionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_9c4a9e22_04d9_4ca2_8cc5_dcfbb9170b05_KHI: The Microsoft Exchange System Attendant service (MSExchangeSA) isn't running._9c4a9e22_04d9_4ca2_8cc5_dcfbb9170b05_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_9C5C1CA0_26DE_44e6_97B7_CFEA8728C6C3_Forensic: The database copy is low on database volume space. The volume is 25\% free._9C5C1CA0_26DE_44e6_97B7_CFEA8728C6C3_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpace.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_9C8AC713_8FEE_4143_A807_5D6634E48CFC_KHI: LDAP Search Timeouts - sustained for 5 minutes - Red(>20)._9C8AC713_8FEE_4143_A807_5D6634E48CFC_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_9CC640FE_0077_445a_B37A_48E5082DB748_KHI: An IMAP4 connectivity transaction failure occurred. No Exchange virtual server was found on the node specified by the user._9CC640FE_0077_445a_B37A_48E5082DB748_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_9D297337_BF11_420A_BD74_B76909FB4DBE_Forensic: OALGen failed to read the OAB version 4 property list from registry._9D297337_BF11_420A_BD74_B76909FB4DBE_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9d50de2f_a18b_4d36_8195_5daa5ebe4f23_Forensic: Databases were moved while Test-MAPIConnectivity cmdlet was executing._9d50de2f_a18b_4d36_8195_5daa5ebe4f23_Microsoft.Exchange.2010.MailboxTestConfigMicrosoft.Exchange.2010.MailboxTestConfig.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_9D909D0A_89B0_4090_97D8_7AA4AC6DCDBF_KHI: MSExchangeTransport detected a critical storage error but didn't complete the recovery action. The service has stopped; please investigate._9D909D0A_89B0_4090_97D8_7AA4AC6DCDBF_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9DDE606B_8329_41C8_8714_58E4DF077784_Forensic: Microsoft Exchange EdgeSync service failed to connect to the AD LDS instance on the Edge Transport server._9DDE606B_8329_41C8_8714_58E4DF077784_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9e0be3b0_c686_4752_ae73_ed6ccb3889c5_KHI: The Exchange store has failed to start due to an error retrieving the local host information._9e0be3b0_c686_4752_ae73_ed6ccb3889c5_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_9E41F8E0_55CD_46CF_9858_DA062360C885_Forensic: SMTP authentication errors from this remote site have exceeded the maximum allowed. Exchange is disconnecting from the site._9E41F8E0_55CD_46CF_9858_DA062360C885_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9EE719A0_E3C9_44C7_A33B_CCFB47B49D1B_KHI: Failed to initialize DSAccess. Proxy address calculation services will not be available on the local Exchange server._9EE719A0_E3C9_44C7_A33B_CCFB47B49D1B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_9FC504B9_3332_4773_8297_79CDBA4733FE_KHI: Delivery Failure Routing 5.4.4 happened over last 5 minutes - Yellow(>1)._9FC504B9_3332_4773_8297_79CDBA4733FE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_A00D77C6_A774_4DC4_9E0D_9BED0BC160A5_Forensic: The topology doesn't have a route to this connector in the routing tables, so the connector will not be used._A00D77C6_A774_4DC4_9E0D_9BED0BC160A5_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A018B042_20AE_4cd2_99B0_0A152766BC01_Forensic: LDAP long running operations - sustained for 5 minutes - Red(>100)._A018B042_20AE_4cd2_99B0_0A152766BC01_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_A0474BE5_42D8_4971_8116_3900A423CF12_KHI: A POP3 connectivity transaction failure occurred. The session object hasn't been created._A0474BE5_42D8_4971_8116_3900A423CF12_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_A04A9A11_B875_4ec4_901C_C07C0381A8C4_KHI: Failed to complete Autodiscover request via External Hostnames._A04A9A11_B875_4ec4_901C_C07C0381A8C4_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.FalseInternal
_A0874139_DF78_40D2_B5A0_C4BEA8ABE1F1_Forensic: Name Server Provider Interface (NSPI) Proxy has been forced to terminate some or all worker and listener threads during shutdown._A0874139_DF78_40D2_B5A0_C4BEA8ABE1F1_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_a15af0c0_9c21_42ea_9b1a_fe857371ede7_Forensic: EdgeSync EHF synchronization warnings._a15af0c0_9c21_42ea_9b1a_fe857371ede7_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_FalseInternal
_A19F5044_F668_4576_9F8F_326096A4D25D_Forensic: A Send connector error occurred while connecting to the specified server._A19F5044_F668_4576_9F8F_326096A4D25D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A2081208_6F97_46B5_818B_455AEC4F5D16_KHI: There was a Web Services connectivity (Internal) transaction failure. The credentials supplied can't be used to test Web Services._A2081208_6F97_46B5_818B_455AEC4F5D16_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_A25C6E20_5DC1_4A71_B2D3_E0C4FEB0B2B0_Forensic: OABGen detected that the file in the distribution point is corrupted or missing. This OAB will not be published._A25C6E20_5DC1_4A71_B2D3_E0C4FEB0B2B0_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A2B6C052_25B7_48FB_80D4_35E9D453D4D7_Forensic: The connection was dropped due to an agent error._A2B6C052_25B7_48FB_80D4_35E9D453D4D7_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A3294D85_C3A0_44A1_A0DD_A1B5DFF3A2A7_Forensic: The Outlook Web App proxy failed because the Client Access server that was supposed to receive the proxy traffic didn't respond._A3294D85_C3A0_44A1_A0DD_A1B5DFF3A2A7_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A38D3B5B_5627_4C21_8AA7_22592DC64B40_KHI: The database is already in use. The service will be stopped._A38D3B5B_5627_4C21_8AA7_22592DC64B40_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_a393ad84_eba1_4d96_9782_113974f0aefc_KHI: The Microsoft Exchange File Distribution service (MSExchangeFDS) isn't running._a393ad84_eba1_4d96_9782_113974f0aefc_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_A3D45C91_497F_48B2_B6DF_DBBCC44140AD_KHI: An Active Directory search has failed. Cannot access schema information._A3D45C91_497F_48B2_B6DF_DBBCC44140AD_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_a4f02f59_88ad_4bd0_86a1_1dc374bd2069_KHI: The Windows Remote Management Service (WinRM) isn't running._a4f02f59_88ad_4bd0_86a1_1dc374bd2069_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_A51FEF06_A2F5_48F4_BD78_DF035BCDE72F_KHI: Delay DSNs - increase over 60 minutes - Red(>20) - Hub Transport._A51FEF06_A2F5_48F4_BD78_DF035BCDE72F_Microsoft.Exchange.2010.HubTransportDsnSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTrueInternal
_A629B786_F700_4BE3_A05B_5F53DE13B9E9_Forensic: Failed to find source directory or file._A629B786_F700_4BE3_A05B_5F53DE13B9E9_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A6527170_9C70_45c9_AF5C_3266CBCEB9FF_KHI: Corrupt or missing log files exist on a database copy; a successful failover restored service._A6527170_9C70_45c9_AF5C_3266CBCEB9FF_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_A7474E12_3DE7_46C0_B356_E8A8BE2C4F89_Forensic: The connection to the mailbox has failed._A7474E12_3DE7_46C0_B356_E8A8BE2C4F89_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A76FCC80_C060_420B_9897_2660A508E0EF_Forensic: The File Distribution service detected that the manifest file for the UM dial plan is corrupted. The current file synchronization operation is aborted._A76FCC80_C060_420B_9897_2660A508E0EF_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A7F5B3A3_6206_4783_A98E_319F1A591892_Forensic: An exception occurred when the Hub Transport server tried to load the Exchange topology configuration data._A7F5B3A3_6206_4783_A98E_319F1A591892_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A8228275_9633_4A50_9E97_13F2220CE791_Forensic: A non-SMTP address space has been detected on the SMTP Send connector that is configured to use DNS for routing messages. The address space will be ignored._A8228275_9633_4A50_9E97_13F2220CE791_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A82C407D_A7C7_4e77_AA11_376C2058FBBA_Forensic: The Prelicensing agent's Web request failed because the URL was redirected. The Prelicensing agent doesn't support URL redirection_A82C407D_A7C7_4e77_AA11_376C2058FBBA_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A85A26E8_6B30_444f_A430_19B1241222AF_Forensic: A user mailbox has hit session limits._A85A26E8_6B30_444f_A430_19B1241222AF_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopyMicrosoft.Exchange.2010.Mailbox.MailboxOnDbCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_A85DBD19_4187_4926_8129_C6A31E323BFE_KHI: Exchange Control Panel connectivity (Internal) transaction failure - Client Access server configuration check failure._A85DBD19_4187_4926_8129_C6A31E323BFE_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_a86210c5_1427_41d1_957f_04d86afe8fbc_KHI: A directory error occurred while running the Test-MAPIConnectivity cmdlet._a86210c5_1427_41d1_957f_04d86afe8fbc_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_A86B0D9D_CB93_4EBB_B018_FE1DBEDE44D7_Forensic: The Address List service could not find the address list root._A86B0D9D_CB93_4EBB_B018_FE1DBEDE44D7_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A8A8C346_B0E5_40D2_AD56_94467D105575_Forensic: A route to the owning server couldn't be found in the routing tables. Messages sent to recipients on this store won't be routed._A8A8C346_B0E5_40D2_AD56_94467D105575_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A8F8668E_2DD2_437F_88BD_C2BC85648B94_Forensic: The Outlook Web App proxy failed because the user for whom the traffic was proxied is a member of too many groups._A8F8668E_2DD2_437F_88BD_C2BC85648B94_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A8FF8474_0A25_4752_BEDF_11FEAF631EC3_KHI: System Attendant failed to add the local computer as a member of the Active Directory service group object._A8FF8474_0A25_4752_BEDF_11FEAF631EC3_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A973C189_3F57_47D6_ACE3_7083A6E43726_Forensic: Name Service Provider Interface (NSPI) Proxy was unable to set the remote procedure call (RPC) endpoint for transport._A973C189_3F57_47D6_ACE3_7083A6E43726_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_A9AFFD9F_0F45_405e_BE52_DD1180D8346B_Forensic: Transient connection failure with the Operations Manager Root Management Server._A9AFFD9F_0F45_405e_BE52_DD1180D8346B_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_a9b0e0f6_1313_4d7e_9bd6_38de868aaaac_KHI: A reseed operation (Update-MailboxDatabaseCopy) is required due to a detected error in the local database copy; the copy is failed and suspended._a9b0e0f6_1313_4d7e_9bd6_38de868aaaac_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_A9C1C0F6_932D_458C_B221_CB8A01403621_Forensic: A recipient object in Active Directory isn't valid. It has been removed from the result set._A9C1C0F6_932D_458C_B221_CB8A01403621_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_a9c5fb92_9099_4b4c_b53e_7f6ef4f9d57f_KHI: The Microsoft Exchange Mail Submission service isn't running. Mail submission to the Hub Transport server won't occur until service is started._a9c5fb92_9099_4b4c_b53e_7f6ef4f9d57f_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_AA2C48CC_2B95_45B1_9343_B7E438FB0D76_Forensic: SMTP rejected a mail because the Active Directory lookup for the FROM address failed: the send-on-behalf-of check returned invalid data._AA2C48CC_2B95_45B1_9343_B7E438FB0D76_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AA6FBBD7_4118_4336_B86B_43B2ED26D8E8_Forensic: SendProtocolLogPath has been set to null, which disables protocol logging for all Send connectors on the server. No send protocol log will be written._AA6FBBD7_4118_4336_B86B_43B2ED26D8E8_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AA86D62F_99CB_4bd3_ABB2_9D213FB99C4F_Forensic: LDAP long running operations - sustained for 5 minutes - Yellow(>50)._AA86D62F_99CB_4bd3_ABB2_9D213FB99C4F_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_AAFFF85B_1C23_44b2_9C47_8C7B07E29801_KHI: Can't connect to Operations Manager Root Management Server._AAFFF85B_1C23_44b2_9C47_8C7B07E29801_Microsoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTrueInternal
_AB191DE4_53EA_4F86_A7DE_3E5D6F635588_Forensic: Unable to complete the opt-in process for Microsoft Update._AB191DE4_53EA_4F86_A7DE_3E5D6F635588_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AB58ABB8_9305_4EC6_AAE7_24CB69537EDC_NonServiceImpacting: Read-only files have been found in the Pickup directory._AB58ABB8_9305_4EC6_AAE7_24CB69537EDC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AC37BF41_C0ED_43A2_A2FC_A2A29AAF0992_Forensic: A routing group for the specified Exchange server couldn't be determined in the routing tables._AC37BF41_C0ED_43A2_A2FC_A2A29AAF0992_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ACBCD192_C6E5_416B_BA4A_7181CA696714_Forensic: LDAP notify call failed. In the absence of other events, this event shouldn't impact mail flow. Review the Application log for related events._ACBCD192_C6E5_416B_BA4A_7181CA696714_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_acf19cd8_7644_4f64_a875_03e7ef55e33c_KHI: The Microsoft Exchange Address Book service (MSExchangeAB) isn't running._acf19cd8_7644_4f64_a875_03e7ef55e33c_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_AD7E0426_3081_401B_B726_08697289DDE0_Forensic: The installation of the Microsoft Exchange Anti-Spam Update service failed with an error._AD7E0426_3081_401B_B726_08697289DDE0_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AE159063_2811_4E1B_BEBE_621262B72917_Forensic: Name Service Provider Interface (NSPI) Proxy can contact the global catalog, but it does not support the NSPI service._AE159063_2811_4E1B_BEBE_621262B72917_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_aec6c194_d147_4e99_b36d_9ee515c6e63b_KHI: The Microsoft Exchange Mailbox Replication service isn't running._aec6c194_d147_4e99_b36d_9ee515c6e63b_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_AECB623A_4E5E_4C0F_AEAA_0DCB878728AB_Forensic: Exchange Direct Push has detected that the minimum heartbeat interval is set to a value that is lower than the minimum allowable value._AECB623A_4E5E_4C0F_AEAA_0DCB878728AB_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AF52BE08_8E71_4d23_8DC0_1CC2BC50F4D7_KHI: Percent of Active Hub Servers over last 30 minutes - Red(<10) - Edge Server._AF52BE08_8E71_4d23_8DC0_1CC2BC50F4D7_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_AF8995E2_DDDD_4BB2_B108_963142F2469C_KHI: Failed to sync entries to EHF._AF8995E2_DDDD_4BB2_B108_963142F2469C_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_AFD0F851_175E_422f_9D68_8A392BAE2229_KHI: Transport availability impacted - Server down over last 5 minutes - Red(<50)._AFD0F851_175E_422f_9D68_8A392BAE2229_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_AFE36677_13C0_4848_B380_2D1A2729A6F6_Forensic: A non-SMTP Gateway Connection failure has occurred on the specified connector: The Drop Directory Quota limit has been exceeded._AFE36677_13C0_4848_B380_2D1A2729A6F6_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B048F00C_2099_49E1_91B5_88221308B369_KHI: The Microsoft Exchange Transport Log Search service failed to read configuration from Active Directory._B048F00C_2099_49E1_91B5_88221308B369_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B04D89DC_6BC5_4173_8622_1D628B70F924_Forensic: The connection between the Client Access server and the Mailbox server failed._B04D89DC_6BC5_4173_8622_1D628B70F924_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B06EC0E4_45D9_45A3_BF1E_51F8AB2C6F66_KHI: The Exchange Transport process isn't responding and will be forced to shut down._B06EC0E4_45D9_45A3_BF1E_51F8AB2C6F66_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B0789F76_7C6F_4d9b_B613_A0F1722DCF6F_Forensic: Transport latency impacted - Categorizer for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._B0789F76_7C6F_4d9b_B613_A0F1722DCF6F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B09E4AA9_A2A8_4fcb_913F_41465581D5BF_Forensic: Exchange Control Panel failed to find a Client Access server in the same site as a user's mailbox. Review MSExchange Control Panel event 19 for the cause._B09E4AA9_A2A8_4fcb_913F_41465581D5BF_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B0A71DC1_F1DB_4f64_A928_0E80073595FD_Forensic: LDAP Searches timed out per minute - sustained for 5 minutes - Yellow(>10)._B0A71DC1_F1DB_4f64_A928_0E80073595FD_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B235CC79_3852_4E0C_B51F_2254774D9CEA_NonServiceImpacting: A message was rejected by the remote server. This message will be deferred and retried because it was marked for retry if rejected._B235CC79_3852_4E0C_B51F_2254774D9CEA_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B286EDB3_D68E_4ca9_B90F_8433652D4D89_KHI: Incremental reseed initial checks failed; the passive database copy cannot be re-synchronized with the active database copy._B286EDB3_D68E_4ca9_B90F_8433652D4D89_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_B29CA4A5_27E8_4772_A1C8_B80BB528E8DC_KHI: LDAP Fatal errors per minute - sustained for 5 minutes - Red(>10)._B29CA4A5_27E8_4772_A1C8_B80BB528E8DC_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B2AD4F21_F51E_476C_AEDF_9C8FB3832EFB_KHI: An error occurred while executing the Test-OWAConnectivity (Internal) cmdlet._B2AD4F21_F51E_476C_AEDF_9C8FB3832EFB_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_B30A83F8_C635_41B3_8BF6_BCD573786F4A_Forensic: Name Server Provider Interface (NSPI) Proxy is unable to run because a worker thread failed to start._B30A83F8_C635_41B3_8BF6_BCD573786F4A_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_b3998d8b_df68_4199_a25f_f348cffdbdf5_KHI: The Exchange store failed to start because the RPC listener registration failed._b3998d8b_df68_4199_a25f_f348cffdbdf5_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_B3B16112_D6EB_4B1F_AFD4_C33FE14C8667_KHI: An IP gateway or IP PBX didn't respond to a SIP OPTIONS request from the Unified Messaging server._B3B16112_D6EB_4B1F_AFD4_C33FE14C8667_Microsoft.Exchange.2010.UnifiedMessaging.Availability.GatewaySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_B41B17FD_B3E2_4D3A_B6CE_0E76A4201D2B_Forensic: Couldn't discover the Active Directory topology in a timely manner._B41B17FD_B3E2_4D3A_B6CE_0E76A4201D2B_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B4891BB1_C37A_4249_ACF8_D8C236494764_KHI: LDAP Searches timed out per minute - sustained for 5 minutes - Red(>20)._B4891BB1_C37A_4249_ACF8_D8C236494764_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B4EC1F25_98AA_44e1_84ED_767E1F749194_KHI: A POP3 connectivity transaction failure occurred. The Client Access server wasn't specified._B4EC1F25_98AA_44e1_84ED_767E1F749194_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_B4FCDD22_D8B8_4561_AEFF_2D1824B61C75_Forensic: SMTP rejected a mail because the Active Directory lookup for the sender address returned validation errors._B4FCDD22_D8B8_4561_AEFF_2D1824B61C75_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B534D3DC_E3B9_49E0_B5A4_1D31559EA10D_KHI: The Microsoft Exchange Unified Messaging service failed to start._B534D3DC_E3B9_49E0_B5A4_1D31559EA10D_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_b54f9f66_df9e_46ff_96a8_feaa4bbed681_KHI: The Microsoft Exchange Mailbox Replication service isn't scanning MDB queues for jobs._b54f9f66_df9e_46ff_96a8_feaa4bbed681_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_B5752ED1_4803_4575_B2EA_F13907E91B3D_KHI: Outlook Web App failed to initialize._B5752ED1_4803_4575_B2EA_F13907E91B3D_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_B5D9A4CE_DB57_4BA2_A834_C071C7DB2FFB_Forensic: There's an error in your Outlook Web App configuration. The authentication type specified in the Web.config file isn't correct._B5D9A4CE_DB57_4BA2_A834_C071C7DB2FFB_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_b60902a7_999b_4b2f_8294_86467325555c_KHI: Failed to execute the Test-ReplicationHealth diagnostic cmdlet._b60902a7_999b_4b2f_8294_86467325555c_Microsoft.Exchange.2010.MailboxTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ReplicationHealth_diagnostic_cmdlet._Report_Collection_FalseInternal
_B64A3733_B776_48DF_8B37_E9592E5D148D_Forensic: Transport found a connector with source servers belonging to multiple Active Directory sites. Transport only uses servers in site with least-cost route._B64A3733_B776_48DF_8B37_E9592E5D148D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B66F039E_0E0E_44D3_ACB0_DC13906C1154_Forensic: The provider that is required for the Autodiscover service is unavailable._B66F039E_0E0E_44D3_ACB0_DC13906C1154_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B6C05632_F686_43b2_B177_577F3FAB8B38_KHI: Unexpected dismount of a database copy. _B6C05632_F686_43b2_B177_577F3FAB8B38_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_B70886DD_AA15_48d6_8EF1_4FC79DBF3B16_KHI: Retry Non-Smtp Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport._B70886DD_AA15_48d6_8EF1_4FC79DBF3B16_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B70F7E3B_DB09_46fd_8B68_C9FABBFED50B_Forensic: Monitor reset failed._B70F7E3B_DB09_46fd_8B68_C9FABBFED50B_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_b7126339_fce6_4e8b_a40b_4957f212f017_KHI: Unable to execute the Test-EdgeSyncEhf diagnostic cmdlet._b7126339_fce6_4e8b_a40b_4957f212f017_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_FalseInternal
_B754CB76_D6A2_4DB3_BB44_BFC2A20187D3_Forensic: The proxy request has failed due to an invalid SSL certificate on the destination Client Access server._B754CB76_D6A2_4DB3_BB44_BFC2A20187D3_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B77AB0BE_EF58_487C_9EDF_E5D31213B6B0_Forensic: System Attendant failed to start the server._B77AB0BE_EF58_487C_9EDF_E5D31213B6B0_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B77D8E56_D44C_4e46_B8D8_54BD2DC2C48F_KHI: Transport IsMemberOfResolver ExpandedGroups Cache nearing capacity - Yellow(>66)._B77D8E56_D44C_4e46_B8D8_54BD2DC2C48F_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_b7862783_2e2c_452f_9062_c674bfae6f99_KHI: Database copy is suspended. The database copy isn't keeping up with the changes on the active database copy._b7862783_2e2c_452f_9062_c674bfae6f99_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B7B5FB07_B964_4112_9FFD_5342A1D5E623_Forensic: Delivery Failure Resolver 5.1.4 happened over last 5 minutes - Yellow(>0)._B7B5FB07_B964_4112_9FFD_5342A1D5E623_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_B7CF638F_AE9E_4389_BD3A_EADC8EA98495_KHI: Exchange Control Panel connectivity (Internal) transaction failure - The test credentials can't be used to test Exchange Control Panel._B7CF638F_AE9E_4389_BD3A_EADC8EA98495_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_b82f2784_48e8_4a13_93f8_76fca5f29af5_KHI: Hard I/O error will dismount or terminate replication on a local database copy._b82f2784_48e8_4a13_93f8_76fca5f29af5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_B847294A_09AD_4E2D_A7C8_3066410359B1_KHI: Exchange couldn't find a certificate in the personal store on the local computer._B847294A_09AD_4E2D_A7C8_3066410359B1_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_B8D0D08A_98AC_4162_8254_3E5E1406F647_KHI: A serious I/O error (lost flush) was detected on a database copy; all copies of the database may be impacted. _B8D0D08A_98AC_4162_8254_3E5E1406F647_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_B94014AE_4EE0_4675_92B4_B71440F75CD0_Forensic: LDAP Disconnects per minute - sustained for 5 minutes - Yellow(>5)._B94014AE_4EE0_4675_92B4_B71440F75CD0_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_B99C0462_6634_4CF6_8D22_737E352B80F5_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._B99C0462_6634_4CF6_8D22_737E352B80F5_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_B9E50DAC_4B7D_4E5C_B093_C470FDB5CCB8_Forensic: Outlook Web App encountered an error when a user tried to change the Outlook Web App language setting._B9E50DAC_4B7D_4E5C_B093_C470FDB5CCB8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BA5CFC17_5569_46cd_831C_9C8375F5B543_KHI: An IMAP4 connectivity transaction failure occurred. The specified server is not a Client Access server._BA5CFC17_5569_46cd_831C_9C8375F5B543_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_BA6E57EF_97A2_44af_951E_76F61219C511_KHI: Missing Availability Service Configuration Information for the Current Forest_BA6E57EF_97A2_44af_951E_76F61219C511_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BA7E097D_D523_4909_9B04_E9AD2CC93760_Forensic: The 'PreloadBaseDNs' and 'PreloadFilters' registry keys don't contain the same number of entries._BA7E097D_D523_4909_9B04_E9AD2CC93760_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BAD37FE4_26F8_4F44_BF65_FD816D128FD2_Forensic: Exchange was unable to load the routing performance counters._BAD37FE4_26F8_4F44_BF65_FD816D128FD2_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BAEC1D94_AC3E_4cfd_A78D_D90CA8AAC51A_Forensic: Exchange doesn't have the required permissions to access the AD RMS server. Contact the AD RMS administrator for help._BAEC1D94_AC3E_4cfd_A78D_D90CA8AAC51A_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_bb26bbcc_e86a_4db8_8737_9be12b9a95ca_KHI: A user mailbox has hit recoverable items warning quota limit._bb26bbcc_e86a_4db8_8737_9be12b9a95ca_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BB593105_B186_4239_B1BE_27BA0BD01D00_Forensic: The Availability service couldn't successfully send a proxy Web request to another instance of the Availability service._BB593105_B186_4239_B1BE_27BA0BD01D00_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BB65ACCF_C264_40BF_90E4_CCD85A4BD078_KHI: Outlook Web App failed to initialize. A forms registry file is not valid._BB65ACCF_C264_40BF_90E4_CCD85A4BD078_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_BBF45A98_5B62_47C7_8114_E2C1500E0D12_Forensic: An error occurred when the Referral Interface called DSAccess to obtain a list of available global catalog servers._BBF45A98_5B62_47C7_8114_E2C1500E0D12_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BBF9B9A7_4C4D_4A88_B696_EFE91376BB3A_KHI: A message from a domain-secured domain failed to authenticate because the TLS certificate does not contain the domain name._BBF9B9A7_4C4D_4A88_B696_EFE91376BB3A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BC0180D5_8CD7_49D7_964F_EF7F51657864_Forensic: The connection to a secure domain failed because the Transport Layer Security negotiation was unsuccessful._BC0180D5_8CD7_49D7_964F_EF7F51657864_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BC1DA5B5_9F96_422c_8A1D_109B098C7B48_Forensic: There's an invalid scheme in the Exchange Control Panel proxy URL. See MSExchange Control Panel event 28 for more details._BC1DA5B5_9F96_422c_8A1D_109B098C7B48_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BC24ECC1_71E8_4E9E_B038_EEB45B3AC6B6_Forensic: Disk \% Free Space low - Yellow(<15\%)._BC24ECC1_71E8_4E9E_B038_EEB45B3AC6B6_Microsoft.Exchange.2010.CommonServerMicrosoft.Exchange.2010.CommonServer.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_BD8A55E8_16F5_4DBC_A6CC_A914259C6267_Forensic: The configuration domain controller specified in a call to SetConfigDCName wasn't found in the Sites container in Active Directory._BD8A55E8_16F5_4DBC_A6CC_A914259C6267_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BDD568E5_0395_4BCA_AE83_1586966BC79C_KHI: A Web Services connectivity (Internal) transaction failure occurred. There was an Autodiscover failure._BDD568E5_0395_4BCA_AE83_1586966BC79C_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_BDDC04AE_8194_4452_8631_974F39CB9433_Forensic: Largest Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Edge Transport._BDDC04AE_8194_4452_8631_974F39CB9433_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_BE1ABFD1_3BF9_4955_A442_D49B31A4EF70_KHI: Exchange Control Panel connectivity (External) transaction failure - The test credentials can't be used to test Exchange Control Panel._BE1ABFD1_3BF9_4955_A442_D49B31A4EF70_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_BE83F6CA_0356_4E6D_936E_ADCFA3112A37_KHI: Outlook Web App failed to initialize. There are multiple forms registries with the same name._BE83F6CA_0356_4E6D_936E_ADCFA3112A37_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_BEBC2FE7_5420_44f0_A6CD_CA63CAB55CC0_Forensic: Failed to remove continuous replication files for a database copy._BEBC2FE7_5420_44f0_A6CD_CA63CAB55CC0_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_BECA4628_4D97_4a65_8398_FCD8DEE0D6D1_KHI: An IMAP4 connectivity transaction failure occurred. A security error was found._BECA4628_4D97_4a65_8398_FCD8DEE0D6D1_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_bf06befc_c495_4940_b8f0_eb2ba802579a_KHI: The database copy isn't replaying log files fast enough to keep up or catch up with the changes being made to the active database copy._bf06befc_c495_4940_b8f0_eb2ba802579a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplaySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_bf7585b1_cb5b_4e44_b94f_4d4fb54009ba_KHI: The Microsoft Exchange Throttling service (MSExchangeThrottling) isn't running._bf7585b1_cb5b_4e44_b94f_4d4fb54009ba_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_BF77B5F3_C359_4390_9690_BFB295230C46_Forensic: Poison Queue Length - sustained for 5 minutes - Yellow(>1) - Hub Transport._BF77B5F3_C359_4390_9690_BFB295230C46_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_bf98c53e_bb5a_4d97_8222_93bdc945d864_KHI: The passive database copy is experiencing a critically high database read latency. The rate is sustained for at least 5 minutes._bf98c53e_bb5a_4d97_8222_93bdc945d864_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C02DEE79_6FDB_4C3F_A8A2_B103CCCFB57D_Forensic: Name Service Provider Interface (NSPI) Proxy is unable to run because the Winsock subsystem failed to initialize._C02DEE79_6FDB_4C3F_A8A2_B103CCCFB57D_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_c0fc6215_600b_483f_ab54_fcc204cdde5e_KHI: At startup, the Microsoft Exchange Replication service's VSS Writer failed to initialize. VSS backups of passive mailbox database copies are disabled._c0fc6215_600b_483f_ab54_fcc204cdde5e_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_C17004A8_EE28_4c60_9B1E_1FFE1F8B1101_KHI: MSExchangeAssistants Failed Requests - Resource Booking_C17004A8_EE28_4c60_9B1E_1FFE1F8B1101_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C187B89E_5B8B_4F1F_A2CD_4F0DCBA0ADE6_KHI: Outlook Web App connectivity (External) transaction failures._C187B89E_5B8B_4F1F_A2CD_4F0DCBA0ADE6_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_C22FD4DA_B592_4B25_92E3_958DCA25AB31_Forensic: The Content Filter agent couldn't read the current mode. Recent changes to the mode might not be used. Restart the Microsoft Exchange Transport service._C22FD4DA_B592_4B25_92E3_958DCA25AB31_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C25F4AE8_46AE_4b85_8C52_F1C84DCFCC1A_KHI: MSExchangeAssistants CPU_C25F4AE8_46AE_4b85_8C52_F1C84DCFCC1A_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C2F64119_1FCB_45AF_B69E_8D570F2A5888_KHI: The database checkpoint file (.chk) is missing or corrupted. The Microsoft Exchange Transport service is shutting down._C2F64119_1FCB_45AF_B69E_8D570F2A5888_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C33C0F3F_48DA_4344_BC95_B65B6EFE7700_Forensic: A specific DLL cannot be loaded. Review the error in the event description for details about the specific DLL that could not be loaded._C33C0F3F_48DA_4344_BC95_B65B6EFE7700_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C340C8EB_34D2_4262_B01F_6F165D4DEA6A_Forensic: An unhandled exception occurred in the Autodiscover service. For more information, contact Microsoft Product Support._C340C8EB_34D2_4262_B01F_6F165D4DEA6A_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C39E6C48_22EB_49da_9A0D_65351A11FBFC_Forensic: Single page restore initiated to correct an error in a database copy._C39E6C48_22EB_49da_9A0D_65351A11FBFC_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C3AF4230_2967_4F9C_98CE_99F10AC1D3D1_Forensic: Credentials used by EdgeSync have either expired or haven't been created. You will need to resubscribe the Edge Transport server._C3AF4230_2967_4F9C_98CE_99F10AC1D3D1_Microsoft.Exchange.2010.HubTransportEdgeSyncMicrosoft.Exchange.2010.HubTransportEdgeSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C3C42908_EBAA_4D31_BBB6_0DE2A9475760_Forensic: The Microsoft Exchange Transport Log Search service failed to access a log file due to an I/O error._C3C42908_EBAA_4D31_BBB6_0DE2A9475760_Microsoft.Exchange.2010.CommonTransportLogSearchMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C3CD6612_B3FE_4126_918F_90323C50E861_KHI: WebServices connectivity (Internal) transaction failures._C3CD6612_B3FE_4126_918F_90323C50E861_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_C3EFB5B5_61D9_45F7_84E4_CE6A0F8B2485_Forensic: The cache or hash table ran out of memory. Restart the Microsoft Exchange Active Directory Topology service._C3EFB5B5_61D9_45F7_84E4_CE6A0F8B2485_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C41F1F34_FBA2_470d_A2F8_26A2F62A322E_Forensic: Delivery Failure Foreign Connector happened over last 5 minutes - Yellow(>5)._C41F1F34_FBA2_470d_A2F8_26A2F62A322E_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_c43fe0f7_0fde_49a7_893d_8adc8811584f_Forensic: The Exchange store has deadlocked._c43fe0f7_0fde_49a7_893d_8adc8811584f_Microsoft.Exchange.2010.Mailbox.InformationStoreMicrosoft.Exchange.2010.Mailbox.InformationStore.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C4426946_C6AD_494F_8F97_65E8E63228B9_Forensic: Internal cache error. Hash table value is incorrect. Restart Active Directory Topology service or restart server. Check System log for hardware errors._C4426946_C6AD_494F_8F97_65E8E63228B9_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C449F79A_1FCD_4641_813E_D72D19353DC0_NonServiceImpacting: There was an Outlook Web App connectivity (External) transaction failure. The Test-OWAConnectivity cmdlet must be run on a Client Access server._C449F79A_1FCD_4641_813E_D72D19353DC0_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_c4b3c56b_c302_4c80_8d09_56a2dd47a98f_KHI: Failed to execute the Test-EdgeSyncEhf diagnostic cmdlet._c4b3c56b_c302_4c80_8d09_56a2dd47a98f_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_FalseInternal
_C4C17DC5_7F23_43A5_AE5B_6A27C630FA1C_Forensic: Retry Remote Delivery Queue Length - sustained for 5 minutes - Yellow(>1) - Hub Transport._C4C17DC5_7F23_43A5_AE5B_6A27C630FA1C_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C4DE92B1_510C_4b75_8558_22DABAD9D3D4_KHI: Corrupt or missing log files exist on a database copy; a successful failover restored service._C4DE92B1_510C_4b75_8558_22DABAD9D3D4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_C4EBFFC8_1FAA_42EF_A5A7_0A9E9C4BBA16_Forensic: The remote forest AvailabilityAddressSpace object for proxying a cross-forest request couldn't be found._C4EBFFC8_1FAA_42EF_A5A7_0A9E9C4BBA16_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C518BA4D_3A9C_4955_BEE4_3B726D297C06_Forensic: Can't find the target bridgehead server for Routing Group connector in the routing tables. Ignoring the target bridgehead server._C518BA4D_3A9C_4955_BEE4_3B726D297C06_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C54C75B0_8244_4FAE_8761_72C062C59A36_KHI: Microsoft Exchange Transport is rejecting messages because the available disk space has dropped below the configured threshold._C54C75B0_8244_4FAE_8761_72C062C59A36_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C55E9F95_DB43_4198_BEFD_8040231D7069_Forensic: The topology doesn't have a route to an Exchange 2003 server from the Routing Group in the routing tables. The recipients will not be routed to this server._C55E9F95_DB43_4198_BEFD_8040231D7069_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C5BCF28B_6591_44e5_9733_C28256B9D5BB_KHI: Exceeded the supported mount limit of database copies on this server._C5BCF28B_6591_44e5_9733_C28256B9D5BB_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_C5D42171_F9B8_4C11_8DB7_9697330CB31D_KHI: The SmtpReceive process failed to start listening on a configured binding because the specified address is already in use._C5D42171_F9B8_4C11_8DB7_9697330CB31D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C5F9DCF5_DE06_4ac3_BC17_E3BC0E8925E6_KHI: Indexing Backlog: Age of the Last Notification Indexed (>3hr backlog for 60min): Please restart the MS Search (Exchange) and Microsoft Exchange Search Indexer services._C5F9DCF5_DE06_4ac3_BC17_E3BC0E8925E6_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C63CEE89_982A_4B91_96A8_D48335172FEA_KHI: An Outlook Web App connectivity (Internal) transaction failure occurred. The test credentials can't be used to test Outlook Web App._C63CEE89_982A_4B91_96A8_D48335172FEA_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_C6E0AE12_9830_4E77_84EB_EF2A5DA21A52_Forensic: Name Server Provider Interface (NSPI) Proxy was only able to send a portion of a packet. The remainder of the packet will be sent when the network is ready._C6E0AE12_9830_4E77_84EB_EF2A5DA21A52_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C7136132_3E7A_42FE_8F7F_374F904491A9_KHI: The Content Filter agent couldn't be initialized because ExSMime.dll couldn't be initialized._C7136132_3E7A_42FE_8F7F_374F904491A9_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C732A60D_A2FF_4DE0_B737_E38A739D2C48_Forensic: The Active Directory site for the specified Exchange server was not determined from the routing tables._C732A60D_A2FF_4DE0_B737_E38A739D2C48_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_c74e136f_dd70_4ebc_98b3_306dad023708_Forensic: The Microsoft Mail Submission Service encountered an exception when trying to load network topology information._c74e136f_dd70_4ebc_98b3_306dad023708_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C7B24DC0_12D1_4336_859E_D502574B8573_KHI: A POP3 connectivity transaction failure occurred. The version of the server is older than the supported versions._C7B24DC0_12D1_4336_859E_D502574B8573_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_C7EB370F_1653_484d_B446_AA57B8B8E5AE_KHI: MSExchangeAssistants Failed Requests - Calendar Assistant_C7EB370F_1653_484d_B446_AA57B8B8E5AE_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C803B727_A78D_4ce1_A630_B0BA9C0495A7_KHI: MS Search (Exchange) has reached the allocated memory cap._C803B727_A78D_4ce1_A630_B0BA9C0495A7_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_c820214e_7678_4718_bf3a_bdf653794e53_KHI: The Microsoft Exchange Speech Engine rejected a call_c820214e_7678_4718_bf3a_bdf653794e53_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_C869F45E_9864_44F3_9C23_0ADDE805759B_Forensic: OALGen is running on a passive cluster node._C869F45E_9864_44F3_9C23_0ADDE805759B_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_c8bad9bc_dfad_4d6d_901b_0a344e7970e5_KHI: The database copy is experiencing an unusually high log generation checkpoint depth for a sustained period of at least 15 minutes._c8bad9bc_dfad_4d6d_901b_0a344e7970e5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_c9086eb9_f237_4e6a_9a9c_a62f4cc4adb0_KHI: The Microsoft Exchange Service Host service (MSExchangeServiceHost) isn't running._c9086eb9_f237_4e6a_9a9c_a62f4cc4adb0_Microsoft.Exchange.2010.CommonServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_C91E9AFA_E751_4858_9AC8_E9B685796241_Forensic: Active Non-Smtp Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._C91E9AFA_E751_4858_9AC8_E9B685796241_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_C94C33BA_D1F7_41DF_839B_8F20C796CAB8_KHI: The Test-ECPConnectivity (External) cmdlet failed to run._C94C33BA_D1F7_41DF_839B_8F20C796CAB8_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_C99021E9_7078_4D22_8334_B96E0DB4C3D0_Forensic: OABGen failed to find or open the OAB version 4 manifest file._C99021E9_7078_4D22_8334_B96E0DB4C3D0_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CB004129_56ED_4E76_88D8_C344FB67DD77_KHI: Failed to execute the Test-ActiveSyncConnectivity (Internal) diagnostic cmdlet._CB004129_56ED_4E76_88D8_C344FB67DD77_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_cb141f89_77c9_4d5b_a744_1e4c6df45204_KHI: The Microsoft Exchange Transport Service (MSExchangeTransport) isn't running._cb141f89_77c9_4d5b_a744_1e4c6df45204_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_CB82F295_AF4E_4E39_AE09_CEE6A65E707C_Forensic: The New Topology couldn't be generated. Make sure that the local domain controllers are reachable and running._CB82F295_AF4E_4E39_AE09_CEE6A65E707C_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CB86B85A_AF81_43FC_9B07_3C6FC00D3D42_KHI: Outlook Web App connectivity (External) transaction failures._CB86B85A_AF81_43FC_9B07_3C6FC00D3D42_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_cc4f2e1a_817c_44d9_b527_4216676b3bfd_KHI: The database copy is low on log volume space. The volume has reached warning levels (50\% free)._cc4f2e1a_817c_44d9_b527_4216676b3bfd_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_CC880966_03ED_46A7_A116_F5E8DDC1ADBE_Forensic: The MSExchangeTransport Pickup process does not have the necessary "Read" permission and "Delete Subfolders and Files" permission for the pickup directory._CC880966_03ED_46A7_A116_F5E8DDC1ADBE_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_cc976087_cb72_41ca_b100_92c5fa41ed1a_KHI: Transaction failures occurred during MAPI connectivity testing._cc976087_cb72_41ca_b100_92c5fa41ed1a_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_FalseInternal
_CDD28006_52A3_4276_8B56_EBB98E6670D6_KHI: LDAP long running operations - sustained for 5 minutes - Red(>100)._CDD28006_52A3_4276_8B56_EBB98E6670D6_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_CEE2E129_DCCC_4284_BEE8_37E064087589_Forensic: The Non-SMTP Gateway Connection failed because the drop directory filename exceeds the system-defined maximum length._CEE2E129_DCCC_4284_BEE8_37E064087589_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CF40D94B_1555_41B0_8411_D660176E4D72_KHI: The Content Filter agent couldn't be initialized because sufficient memory couldn't be allocated for an internal buffer._CF40D94B_1555_41B0_8411_D660176E4D72_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CF447F7A_A76B_485C_B63A_431D02181D2D_Forensic: Exchange was unable to determine the version of the Microsoft Update agent or the Microsoft Update agent is not current._CF447F7A_A76B_485C_B63A_431D02181D2D_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CF45C563_69B2_4DB5_9912_722ED6F441D1_KHI: Activation of transport components failed because of an unexpected exception._CF45C563_69B2_4DB5_9912_722ED6F441D1_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_cf8bc72a_3be8_4431_8b99_b810888fd790_KHI: The Microsoft Exchange Information Store service (MSExchangeIS) isn't running._cf8bc72a_3be8_4431_8b99_b810888fd790_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_CF9BC4E8_193F_4856_97EE_0127B67410ED_KHI: MSExchangeTransport has detected a critical storage error but won't take recovery actions. The service has stopped; please investigate._CF9BC4E8_193F_4856_97EE_0127B67410ED_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_CFF22C2D_3C03_4F86_ADDA_2EA28F0E3488_Forensic: An Outlook Web App configuration setting isn't valid. The authentication type specified on the Outlook Web App virtual directory is Anonymous._CFF22C2D_3C03_4F86_ADDA_2EA28F0E3488_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D0395269_B459_402b_BAB1_9E681DF8A12A_Forensic: An IMAP4 connectivity transaction failure occurred. The specified mailbox database is a recovery mailbox database, so it won't be monitored._D0395269_B459_402b_BAB1_9E681DF8A12A_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_d0705a18_3c3b_4916_b893_8c967de4b8e4_KHI: The Microsoft Exchange Credential service (MSExchangeEdgeCredential) isn't running._d0705a18_3c3b_4916_b893_8c967de4b8e4_Microsoft.Exchange.2010.EdgeTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_d071e080_b6b5_49e7_abcd_f55c57117b70_KHI: The Microsoft Exchange Replication service is not running._d071e080_b6b5_49e7_abcd_f55c57117b70_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_d0adb6d7_2c2f_454f_87c1_de5c474eeb23_KHI: The Microsoft Exchange Replication service wasn't able to enable the Tasks RPC listener._d0adb6d7_2c2f_454f_87c1_de5c474eeb23_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_D2113098_D0C5_4786_82C1_306905CA1BF0_KHI: Transport categorizer jobs are partially unavailable - percentage of available categorizer jobs - Yellow(<99)._D2113098_D0C5_4786_82C1_306905CA1BF0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_D2405780_498B_47e3_B9FD_A64B80DE77B6_KHI: OABGen failed to load the OAB version 4 manifest file._D2405780_498B_47e3_B9FD_A64B80DE77B6_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D240AD5E_BC03_4A15_8F74_148E6281A554_KHI: Couldn't initialize the the Content Filter agent. Check the access control lists (ACLs) on the files._D240AD5E_BC03_4A15_8F74_148E6281A554_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D27F04D5_15C1_44e8_A15C_043CD7F19BA8_KHI: IMAP4 connectivity transaction failures._D27F04D5_15C1_44e8_A15C_043CD7F19BA8_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_D287F09E_78F0_4884_9D31_772F8A0F36BF_Forensic: An exception occurred and was handled by Exchange ActiveSync._D287F09E_78F0_4884_9D31_772F8A0F36BF_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D2B62A01_2927_4B5E_83FF_A546AA587FAF_Forensic: A search request that was sent to the server running Active Directory didn't provide a result within a reasonable time period._D2B62A01_2927_4B5E_83FF_A546AA587FAF_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D2FCB90D_426B_4A8C_AA6C_955E4B2E4916_KHI: Exchange Control Panel connectivity (Internal) transaction warnings._D2FCB90D_426B_4A8C_AA6C_955E4B2E4916_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_D39DEB77_7BDC_4B08_A789_2642EFE40134_Forensic: The MAD Free Busy DLL is missing or failed to start properly._D39DEB77_7BDC_4B08_A789_2642EFE40134_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D3AD2DAB_AC7C_4439_AFBB_7B3B66406F26_KHI: Outbound authentication failed at the send connector. It may have failed to acquire a Kerberos ticket for the destination target name._D3AD2DAB_AC7C_4439_AFBB_7B3B66406F26_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D49298BE_0CA4_4F20_AD0C_DFCF0E439B67_Forensic: File Distribution Service: Temporarily unable to connect to Active Directory to read configuration data. Will automatically retry in one minute._D49298BE_0CA4_4F20_AD0C_DFCF0E439B67_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D4C885E3_6A22_4946_A268_87FE12695E74_Forensic: An incorrect file version was detected. Review the event description for more information._D4C885E3_6A22_4946_A268_87FE12695E74_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D4E93A3B_A52D_4706_8161_4FE8A9B655CC_Forensic: The Prelicensing agent didn't retrieve a license because the content was published for an untrusted AD RMS server. Contact the AD RMS administrator._D4E93A3B_A52D_4706_8161_4FE8A9B655CC_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_d5515d9f_931d_44ab_bac9_7981c189eb2d_KHI: The Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) is not running._d5515d9f_931d_44ab_bac9_7981c189eb2d_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_D551B449_CD5B_40FC_B7B5_97BB6446F431_Forensic: Outlook Web App isn't available for one of the mailboxes in a mailbox database._D551B449_CD5B_40FC_B7B5_97BB6446F431_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D5647FF8_5A99_4F6D_8271_38F2DB4043D8_Forensic: The provider configuration for the Autodiscover service is not valid. To obtain a valid DLL, contact Microsoft Product Support._D5647FF8_5A99_4F6D_8271_38F2DB4043D8_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D5877AD5_82F1_4A80_8C8D_C04DAA16BA42_Forensic: Retry Non-Smtp Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._D5877AD5_82F1_4A80_8C8D_C04DAA16BA42_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_D59E4017_EAD3_4ED8_B664_B00775538B2F_KHI: LDAP Search Time - sustained for 5 minutes - Red(>100msec)._D59E4017_EAD3_4ED8_B664_B00775538B2F_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_D5D2B0A7_8F40_4C7E_A4B1_16A8858BA48A_Forensic: System Attendant failed to stop the server._D5D2B0A7_8F40_4C7E_A4B1_16A8858BA48A_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D5E5D414_F22E_4A83_8426_CC7E53E7B232_Forensic: No target bridgehead servers were found for this routing group connector in the routing tables._D5E5D414_F22E_4A83_8426_CC7E53E7B232_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D6311E52_4CF1_4676_95FB_3D46DA78EEF3_Forensic: A configuration change was detected but the updated Receive connector configuration could not be read. The configuration change will be ignored._D6311E52_4CF1_4676_95FB_3D46DA78EEF3_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D63426C3_9C0D_45e7_A31C_81345B7A8748_KHI: The Exchange Transport service was unable to start listening on the receive connector binding because an error was encountered._D63426C3_9C0D_45e7_A31C_81345B7A8748_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D652EF77_22DC_4444_8479_82DD7CCF02AF_KHI: The Outlook Web App proxy failed because no Outlook Web App virtual directory configured for Kerberos authentication could be found in the site._D652EF77_22DC_4444_8479_82DD7CCF02AF_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D66BC916_3BF1_4ED9_BF40_45A1B9825F23_Forensic: The connection to the Send connector was disconnected by the remote server._D66BC916_3BF1_4ED9_BF40_45A1B9825F23_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D68F3A5B_2AFC_41BD_AD82_FADB7C9CBBF8_Forensic: An accepted domain entry contains invalid data. As a result the associated record will be skipped._D68F3A5B_2AFC_41BD_AD82_FADB7C9CBBF8_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D6A2A789_24B4_4E53_A412_96D85E8D403D_Forensic: A transient configuration error was detected while the routing configuration was being loaded._D6A2A789_24B4_4E53_A412_96D85E8D403D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_d6bb1e22_e151_4993_b5f5_7328604e3741_KHI: The Exchange store can't create any more MAPI-named properties._d6bb1e22_e151_4993_b5f5_7328604e3741_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_D7B6A24A_18BC_45c9_A479_02C8BEA0AAAE_Forensic: An error was detected on a hard drive during a paging operation._D7B6A24A_18BC_45c9_A479_02C8BEA0AAAE_Microsoft.Exchange.2010.CommonServerMicrosoft.Exchange.2010.CommonServer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D8AF17F3_A989_4ABD_89C2_DB1CA16CAA59_Forensic: A Web request failed security checks._D8AF17F3_A989_4ABD_89C2_DB1CA16CAA59_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D93C0D26_DC93_4517_844B_E8DA7AC69066_KHI: RPC could not start._D93C0D26_DC93_4517_844B_E8DA7AC69066_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D94A0FA6_4C27_4D41_9399_4E5609116F47_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 20 for the cause._D94A0FA6_4C27_4D41_9399_4E5609116F47_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_D94A863B_E682_47FD_BCFC_FA5FEFE1A0CC_KHI: The non-nullable column in the Extensible Storage Engine (ESE) can't be found in the actual database table._D94A863B_E682_47FD_BCFC_FA5FEFE1A0CC_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D9D72443_644A_4DD2_9571_015E51E2C9E8_KHI: Outlook Web App wasn't able to proxy traffic because the authentication for the connection between the two Client Access servers failed._D9D72443_644A_4DD2_9571_015E51E2C9E8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_D9D73EBD_1B56_410a_B1FF_695CB6AF1BB2_KHI: A POP3 connectivity transaction failure occurred. The specified server isn't a Client Access server._D9D73EBD_1B56_410a_B1FF_695CB6AF1BB2_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_D9FC4AA3_09EA_478A_8E33_CBBE567A8D29_Forensic: OABGen received an error while trying to delete one of the offline address book files from the distribution point._D9FC4AA3_09EA_478A_8E33_CBBE567A8D29_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DA1F123E_5452_4AFC_9758_E89DFB04A255_KHI: An error occurred while the Test-ECPConnectivity (External) cmdlet was running._DA1F123E_5452_4AFC_9758_E89DFB04A255_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_DA669FC5_801C_4A6E_AE5A_264DAE189F2D_Forensic: The Microsoft Exchange Transport Log Search Service could not be stopped._DA669FC5_801C_4A6E_AE5A_264DAE189F2D_Microsoft.Exchange.2010.CommonTransportLogSearchMicrosoft.Exchange.2010.CommonTransportLogSearch.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DAA00B44_E7D1_4F71_B5EB_A5E38453F50B_Forensic: The Exchange transport Store Driver component encountered a poison message during message submission. The submission will be cancelled._DAA00B44_E7D1_4F71_B5EB_A5E38453F50B_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DAD4CB4D_33CF_4B6D_97F3_DD02FC02C22B_KHI: The internal TLS certificate for this server is missing._DAD4CB4D_33CF_4B6D_97F3_DD02FC02C22B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DAE8F49A_A655_4762_B144_F5327061F873_Forensic: An error occured while processing a meeting message._DAE8F49A_A655_4762_B144_F5327061F873_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DB2EDBB0_A358_4080_BE6D_1C18DA09CA2F_Forensic: Unable to load the performance counters for the MSExchange Store Driver Performance object._DB2EDBB0_A358_4080_BE6D_1C18DA09CA2F_Microsoft.Exchange.2010.HubTransportStoreDriverMicrosoft.Exchange.2010.HubTransportStoreDriver.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_db4ee2d6_db22_496a_9146_c7a9444efcb1_KHI: The Exchange store has consumed 90\% of available RPC threads._db4ee2d6_db22_496a_9146_c7a9444efcb1_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_DBAF248E_2EC9_4DE5_806D_28994B58B463_KHI: Could not read the forest GUID. The Proxy address calculation services will not be available on the local Exchange server._DBAF248E_2EC9_4DE5_806D_28994B58B463_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DC0B8279_5D98_45B1_B11B_5733B54BAAFB_Forensic: The e-mail address description object in the Microsoft Exchange directory is missing._DC0B8279_5D98_45B1_B11B_5733B54BAAFB_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DC13A005_E972_41F3_943C_523356F917B6_Forensic: Submission Queue Length - sustained for 5 minutes - Red(>250) - Edge Transport._DC13A005_E972_41F3_943C_523356F917B6_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_DC78F809_2071_4749_83B6_C956AA72972A_Forensic: The connection to a secure domain on a Send connector failed because Transport Layer Security (TLS) negotiation failed._DC78F809_2071_4749_83B6_C956AA72972A_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DD00B86F_9F9E_4908_850D_9B85F46340DB_KHI: Could not read the root entry in Active Directory._DD00B86F_9F9E_4908_850D_9B85F46340DB_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DD171A22_F9DF_4304_9828_CCFC2614961E_Forensic: System Attendant is unable to generate an e-mail address of particular type._DD171A22_F9DF_4304_9828_CCFC2614961E_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DD2E34EA_F0F4_4AA1_892F_8D61E28C03A0_Forensic: Protocol Analysis: No DNS entries were found for this server's authoritative domains. Open proxy detection is not available._DD2E34EA_F0F4_4AA1_892F_8D61E28C03A0_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DD510CA1_1F41_4CD0_B4B4_0DE018B6D276_KHI: Exchange failed to retrieve the local server. It's possible that the DNS name of the server has changed._DD510CA1_1F41_4CD0_B4B4_0DE018B6D276_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_dd77cb38_b8ac_43e7_823f_98b5bdbe08bf_KHI: The database copy is low on database volume space. The volume has reached error levels (16\% free)._dd77cb38_b8ac_43e7_823f_98b5bdbe08bf_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_DD81E7B7_D948_411A_B86B_1769D961577A_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to an ACL setup error._DD81E7B7_D948_411A_B86B_1769D961577A_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DDD56B9F_BAA2_4595_AC8D_6CE657AF8571_KHI: The Microsoft Exchange Transport Log Search service failed because MessageTrackingLogPath was set to an invalid value._DDD56B9F_BAA2_4595_AC8D_6CE657AF8571_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DE5AB2A8_6E88_4B88_8CAB_21A6C2C7AEFC_Forensic: Exchange was unable to load the Active Directory recipient cache performance counters._DE5AB2A8_6E88_4B88_8CAB_21A6C2C7AEFC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DEAB0791_B39D_4F69_86BD_62AB9BCEE7AE_Forensic: OABGen encountered an error while calculating offline address lists. Offline address books will not be available for client download._DEAB0791_B39D_4F69_86BD_62AB9BCEE7AE_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ded93f77_9f9e_4556_a724_d7f9abd4319a_KHI: Corruption that can be corrected via a reseed exists in a local database copy; it may terminate replication or dismount._ded93f77_9f9e_4556_a724_d7f9abd4319a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_DEE64475_0E74_4215_9BFA_6271FF19F5E4_KHI: Authentication of the connection to a secure domain failed because the TLS server certificate didn't contain the name of that domain._DEE64475_0E74_4215_9BFA_6271FF19F5E4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_dee7ed67_3f2f_4dde_87c7_099499a65236_KHI: A service request to the Media Relay Authentication server has failed._dee7ed67_3f2f_4dde_87c7_099499a65236_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DEFA897E_942B_4218_8137_2E03EA419C9A_Forensic: The proxy request to a Client Access server has timed out. The server specified in the event description may be overloaded._DEFA897E_942B_4218_8137_2E03EA419C9A_Microsoft.Exchange.2010.ClientAccessActiveSyncMicrosoft.Exchange.2010.ClientAccessActiveSync.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DF0FB30A_62D2_4E7A_B35C_5BF987134471_KHI: Availability Service initialization failed._DF0FB30A_62D2_4E7A_B35C_5BF987134471_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_DF853503_39F9_4CA7_B8A2_D980120615EE_Forensic: Couldn't create the shared memory heap. This could result from internal Epoxy (ExIPC) failures or the system may be running out of memory._DF853503_39F9_4CA7_B8A2_D980120615EE_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E055B0D0_C283_41EA_AA85_E1CFA456C216_KHI: The server can't achieveTransport Layer Security which the Receive connector requires for the MailFrom command to be run,_E055B0D0_C283_41EA_AA85_E1CFA456C216_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E068F4D7_9557_4B98_8D72_B8E78327561E_Forensic: Error occurred while executing the Test-ExchangeSearch diagnostic cmdlet._E068F4D7_9557_4B98_8D72_B8E78327561E_Microsoft.Exchange.2010.MailboxTestConfigMicrosoft.Exchange.2010.MailboxTestConfig.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ExchangeSearch_cmdlet.FalseInternal
_E0A971E0_69B1_4B5E_AA0C_B9297A4E8C3A_KHI: There wasn't enough disk space to complete the database operation. The Microsoft Exchange Transport service is shutting down._E0A971E0_69B1_4B5E_AA0C_B9297A4E8C3A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E109C7BB_79DC_4E15_978B_C6F70B6082C3_Forensic: Delay DSNs - increase over 60 minutes - Yellow(>10) - Edge Transport._E109C7BB_79DC_4E15_978B_C6F70B6082C3_Microsoft.Exchange.2010.EdgeTransportDsnMicrosoft.Exchange.2010.EdgeTransportDsn.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTrueInternal
_E180DC4B_F579_4df1_83EE_D9717E062A05_Forensic: Delivery Failure Resolver 5.2.4 happened over last 5 minutes - Yellow(>1)._E180DC4B_F579_4df1_83EE_D9717E062A05_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_E1DACB09_F28C_4CF9_84F6_93547B1692EC_Forensic: The Exchange Active Directory Provider couldn't bind to Active Directory._E1DACB09_F28C_4CF9_84F6_93547B1692EC_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E2759770_9F72_4AA2_A7B7_605783A89C52_Forensic: The Content Filter wrapper process couldn't be restarted in a timely manner. Restarting the Microsoft Exchange Transport Service may solve the problem._E2759770_9F72_4AA2_A7B7_605783A89C52_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E27923E8_7431_4EC5_B11F_228990A875CA_Forensic: The provider that was requested for the Autodiscover service could not be loaded._E27923E8_7431_4EC5_B11F_228990A875CA_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_e2d3ba47_2bb5_412f_ac7f_f1cbb7609fba_Forensic: Exchange store: Public Folder Database: Receive Queue Size - sustained for 15 minutes - Yellow (>25)._e2d3ba47_2bb5_412f_ac7f_f1cbb7609fba_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseMicrosoft.Exchange.2010.Mailbox.PublicFolderDatabase.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_E30D7CF3_9ABA_43DA_B577_593EB48CF499_Forensic: The Exchange Active Directory Provider failed to obtain DNS records for the specified domain or forest._E30D7CF3_9ABA_43DA_B577_593EB48CF499_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E3299B7D_F9E6_4A82_B425_6CA019D6A06E_KHI: An EdgeSync process ended because the Hub Transport server couldn't find a matching direct trust certificate on the Edge Transport server._E3299B7D_F9E6_4A82_B425_6CA019D6A06E_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_e38e2187_c32f_430d_bc4b_409c69447603_KHI: The IIS Admin Service (IISAdmin) isn't running._e38e2187_c32f_430d_bc4b_409c69447603_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_e3c6edac_a01d_423f_914d_611dae975709_Forensic: The Exchange Search Indexer failed to retreive the local server object from Active Directory. It will be retried._e3c6edac_a01d_423f_914d_611dae975709_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E48576B7_0A03_4A97_839E_446948E24443_Forensic: No DNS servers could be retrieved via the network adapter. Use the Get-NetworkConnectionInfo cmdlet to check your network connectivity ._E48576B7_0A03_4A97_839E_446948E24443_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E4DA6733_A889_42b3_B5C0_A8B50A949836_KHI: High percentage of Transport Throttling Service Client requests are failing - sustained for 30 minutes - Red(>10)_E4DA6733_A889_42b3_B5C0_A8B50A949836_Microsoft.Exchange.2010.CommonTransportThrottlingClientSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_e549edda_29f5_4d5e_b2f1_d0438f754577_KHI: Hard I/O error will dismount or terminate replication on a database copy._e549edda_29f5_4d5e_b2f1_d0438f754577_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_E5842AC5_0DB5_4F25_B615_19252CF64732_Forensic: Outlook Web App failed to read the message classification settings from Active Directory for one of its virtual directories._E5842AC5_0DB5_4F25_B615_19252CF64732_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E586AF17_1F24_4D1C_9060_71FDCFDD31CC_KHI: Microsoft Exchange couldn't read the server configuration. The Microsoft Exchange Credential service will be stopped._E586AF17_1F24_4D1C_9060_71FDCFDD31CC_Microsoft.Exchange.2010.EdgeTransportMessageSecuritySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E5F99D06_8915_4544_96BE_D30BD9C5312D_KHI: A secure connection to a domain secure domain could not be established because the validation of the TLS server certificate failed._E5F99D06_8915_4544_96BE_D30BD9C5312D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_e615a354_1df7_4d34_87bd_0f6706aad86f_KHI: The Exchange information store: RPC Averaged Latency - sustained for 5 minutes - Red (>70 msec)._e615a354_1df7_4d34_87bd_0f6706aad86f_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_E665941A_961D_4825_AF6B_7DC3D2A37F47_KHI: Microsoft Exchange couldn't read the server configuration because the directory is unavailable._E665941A_961D_4825_AF6B_7DC3D2A37F47_Microsoft.Exchange.2010.EdgeTransportMessageSecuritySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E680736D_9217_4CE9_9725_8E577A61DB09_Forensic: OABGen couldn't open the directory specified in the registry as the OAB V4 publishing point._E680736D_9217_4CE9_9725_8E577A61DB09_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_e6cd2d86_0b00_4aa4_91ae_170a1a70fa76_KHI: The Exchange information store: RPC Averaged Latency - sustained for 5 minutes - Yellow (>50 msec)._e6cd2d86_0b00_4aa4_91ae_170a1a70fa76_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_E6D4C7DC_6BA9_4D33_9FAB_3F37E88A987D_NonServiceImpacting: The STARTTLS certificate will expire soon. The certificate must be renewed to preserve mail flow._E6D4C7DC_6BA9_4D33_9FAB_3F37E88A987D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_e6e19525_336f_4ea0_8a97_7b9d58085b42_KHI: EdgeSync MSERV synchronization isn't configured._e6e19525_336f_4ea0_8a97_7b9d58085b42_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_FalseInternal
_E74793F5_5376_4165_A193_7DB648E02057_Forensic: An Exchange 2003 server was found in the Exchange 2010 Routing Group in the routing tables._E74793F5_5376_4165_A193_7DB648E02057_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E7A37FE2_3208_4A15_B17F_4C93D2B8EE01_Forensic: A request to access a public folder failed._E7A37FE2_3208_4A15_B17F_4C93D2B8EE01_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E83261DC_B7CD_4D33_A31D_999C8DF6C5F4_NonServiceImpacting: File Distribution Service: Failed to read the security descriptor from Active Directory for the offline address book._E83261DC_B7CD_4D33_A31D_999C8DF6C5F4_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E872B2B2_A9F0_47D2_B235_269959490DDC_Forensic: The message could not be received from a domain-secured domain because of a configuration error on a Receive connector._E872B2B2_A9F0_47D2_B235_269959490DDC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E8DD5266_D5E6_4ED1_A890_AFF268D644E4_Forensic: The Exchange authentication certificate must be updated. Run the Enable-ExchangeCertificate command on this server to update it._E8DD5266_D5E6_4ED1_A890_AFF268D644E4_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_E9103850_5DE0_4282_9086_2A505C920487_Forensic: Protocol Analysis: DNS is not configured. Most likely, the reason for this is that no DNS servers were found. Sender Reputation calculations are disabled._E9103850_5DE0_4282_9086_2A505C920487_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EAF0B308_03BF_497C_A004_B36C14F2DE5D_KHI: The process to start transport agents failed. The transport service will be stopped._EAF0B308_03BF_497C_A004_B36C14F2DE5D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EB0EF917_E93D_42a0_81A5_80E5A778353E_Forensic: Database copy encountered a serious I/O error (lost flush) that may have affected all copies of the database._EB0EF917_E93D_42a0_81A5_80E5A778353E_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EB4A465D_1178_40bc_8A57_A7362E961555_Forensic: Transport latency impacted - Service Restart for 99th percentile of messages not meeting SLA over last 15 minutes - Yellow(>10)._EB4A465D_1178_40bc_8A57_A7362E961555_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_EB6E56FF_A03D_442F_A218_E06B9238BF4D_Forensic: The Proxy Web request to a remote Active Directory forest couldn't be issued because of invalid or missing credentials._EB6E56FF_A03D_442F_A218_E06B9238BF4D_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EC2E1639_05E5_4DE3_9ECB_A6D2288956B4_NonServiceImpacting: Your Autodiscover service configuration isn't secure. To fix this problem, disable anonymous access on the Autodiscover virtual directory._EC2E1639_05E5_4DE3_9ECB_A6D2288956B4_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EC5D4592_27CA_4564_B137_3C529EE6E91C_Forensic: The Prelicensing agent didn't retrieve a license because the RMS template wasn't found on the AD RMS server. Contact the AD RMS administrator._EC5D4592_27CA_4564_B137_3C529EE6E91C_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EC781FC8_878C_4C96_90FC_402F0E404D5D_Forensic: Disk Free Megabytes low - Yellow(<40MB)._EC781FC8_878C_4C96_90FC_402F0E404D5D_Microsoft.Exchange.2010.CommonServerMicrosoft.Exchange.2010.CommonServer.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_EC97C8B4_BD35_4E96_8161_1DCA85426019_KHI: The TLS certificate used for SMTP authentication by Exchange couldn't be read from Active Directory._EC97C8B4_BD35_4E96_8161_1DCA85426019_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ECA5862F_5C42_4676_A797_582A94C749E3_Forensic: The maximum number of allowed processes are using DSAccess. No additional processes can use the API. Restart the Active Directory Topology service._ECA5862F_5C42_4676_A797_582A94C749E3_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ED498CBF_EA09_43B5_A937_6BD4A3D694DE_KHI: Exchange Control Panel connectivity (External) transaction failure - Client Access server configuration check failure._ED498CBF_EA09_43B5_A937_6BD4A3D694DE_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_ED4B0762_746A_4ca8_80CF_BC6B673F1C18_Forensic: Exchange Control Panel detected an unhandled exception during a web service request. Review MSExchange Control Panel event 5 for the cause._ED4B0762_746A_4ca8_80CF_BC6B673F1C18_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ED514F00_3C9C_4E26_95DA_BC9214C43066_Forensic: Couldn't load the IP reputation data file._ED514F00_3C9C_4E26_95DA_BC9214C43066_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ED5F9E5A_A4DA_4CF2_85DF_DD1D6BFDE330_Forensic: The account provided valid credentials; however, it does not have submit permissions on the SMTP Receive connector, so the authentication has failed._ED5F9E5A_A4DA_4CF2_85DF_DD1D6BFDE330_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EDBF6305_4712_4514_82E2_46AEF327DE96_Forensic: The Exchange Active Directory Provider couldn't contact a domain controller in the domain, but it could resolve the name._EDBF6305_4712_4514_82E2_46AEF327DE96_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EDF99431_A386_4CCD_9EFC_C79D8975B101_KHI: An E-mail Address Policy has an invalid Filter Rule (purportedSearch). New users, contacts and groups will not receive email._EDF99431_A386_4CCD_9EFC_C79D8975B101_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EE1390F5_BEE4_438F_A768_D6252E07B4EA_KHI: The Outlook Web App proxy failed because of a version mismatch between the source and destination servers._EE1390F5_BEE4_438F_A768_D6252E07B4EA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EE6253F6_FEDE_44E6_BCE7_F75ED0FBE003_Forensic: A message from a domain-secured domain could not be authenticated because the server did not use Transport Layer Security (TLS)._EE6253F6_FEDE_44E6_BCE7_F75ED0FBE003_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EE7D1033_F0C7_442B_9EDE_B0C3FD99CB57_Forensic: Delay DSNs - increase over 60 minutes - Yellow(>10) - Hub Transport._EE7D1033_F0C7_442B_9EDE_B0C3FD99CB57_Microsoft.Exchange.2010.HubTransportDsnMicrosoft.Exchange.2010.HubTransportDsn.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTrueInternal
_eed681c4_631d_44cc_80a8_b3091c9d681e_KHI: The Microsoft Exchange ADAM service (ADAM_MSExchange) isn't running._eed681c4_631d_44cc_80a8_b3091c9d681e_Microsoft.Exchange.2010.EdgeTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_ef4a8515_1cc0_48a9_aa12_92ba059a6eae_KHI: The database copy is not mounted on the local server. Another database copy may be mounted on a different server._ef4a8515_1cc0_48a9_aa12_92ba059a6eae_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMountedSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_EF51D339_22C5_49b3_8B6B_25002BE31D4A_KHI: Retry Mailbox Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport._EF51D339_22C5_49b3_8B6B_25002BE31D4A_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_EF847EBB_4E8B_4AF2_83DF_57CF667B4D1F_Forensic: A Client Access server couldn't be found to handle the request._EF847EBB_4E8B_4AF2_83DF_57CF667B4D1F_Microsoft.Exchange.2010.ClientAccessInformationWorkerMicrosoft.Exchange.2010.ClientAccessInformationWorker.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ef9f008b_9bb9_4908_b306_47840c754b54_KHI: Couldn't run the Test-EdgeSyncMserv diagnostic cmdlet._ef9f008b_9bb9_4908_b306_47840c754b54_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_FalseInternal
_EFE169D2_A97A_4FA9_B99A_AF2A15A4E43E_KHI: An Address List has an invalid Filter Rule (purportedSearch)._EFE169D2_A97A_4FA9_B99A_AF2A15A4E43E_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_EFED2483_2313_4BC1_84F8_2349A4B07E08_Forensic: Submission Queue Length - sustained for 5 minutes - Yellow(>150) - Edge Transport._EFED2483_2313_4BC1_84F8_2349A4B07E08_Microsoft.Exchange.2010.EdgeTransportQueuesMicrosoft.Exchange.2010.EdgeTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_EFF51D65_DD7C_44A3_BFD0_9F0644ADC4E8_Forensic: A new parent Legacy Exchange DN container was found during the offline address book generation._EFF51D65_DD7C_44A3_BFD0_9F0644ADC4E8_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F0089B10_32F0_405D_AC3F_7AB2CF3B6980_KHI: Failed to start the Microsoft Exchange System Attendant service; review related events for more information._F0089B10_32F0_405D_AC3F_7AB2CF3B6980_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F05F9B1E_1FF6_4A96_B133_B882F169FBC0_KHI: Remote PowerShell connectivity (Internal) transaction failure - Server configuration check failure._F05F9B1E_1FF6_4A96_B133_B882F169FBC0_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_F0A79980_0D69_4A9B_8B14_3D07A5F0827F_KHI: Exchange Control Panel connectivity (Internal) transaction failures._F0A79980_0D69_4A9B_8B14_3D07A5F0827F_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_F0BAA161_B024_4C96_B3B8_FABAE6D9E1D1_KHI: The AD RMS service connection point (SCP) URL doesn't exist or is invalid. Republish the SCP using the AD RMS server._F0BAA161_B024_4C96_B3B8_FABAE6D9E1D1_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F0D0B8CE_11C4_41B2_961A_5A57AEEF62A2_KHI: The Outlook Web App proxy failed because of SSL configuration issues on the destination Outlook Web App virtual directory._F0D0B8CE_11C4_41B2_961A_5A57AEEF62A2_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F10B91B3_5742_4A74_8B74_2EA8320F0476_Forensic: The route to the source transport or MTA server for the specified connector couldn't be found in the routing tables._F10B91B3_5742_4A74_8B74_2EA8320F0476_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F138780F_564B_47e7_B2F7_F0C971768AA9_Forensic: Failed to remove a log file for database. Either the file is in use or the service has insufficient permissions._F138780F_564B_47e7_B2F7_F0C971768AA9_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F1796B63_2FDA_4822_A6C6_1FBA8B8134D5_NonServiceImpacting: WebServices connectivity (Internal) transaction failure - The credentials cannot be used to test Web Services._F1796B63_2FDA_4822_A6C6_1FBA8B8134D5_Microsoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.FalseInternal
_F17A0A2B_B213_4736_98D0_B9B2AD8F6D04_Forensic: File Distribution Service: Remote file not found. Current synchronization task aborted._F17A0A2B_B213_4736_98D0_B9B2AD8F6D04_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F1C987AB_6AD5_426b_9100_88A16DBEF091_KHI: An IMAP4 connectivity transaction failure occurred. The mailbox isn't enabled for the user._F1C987AB_6AD5_426b_9100_88A16DBEF091_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.FalseInternal
_F1CDCFE1_D2B9_4DBE_B4C9_144067954938_KHI: Outlook Web App wasn't able to register for setting change notification for one of its virtual directories._F1CDCFE1_D2B9_4DBE_B4C9_144067954938_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_F2845274_EAC4_4808_80EE_82267EC93534_Forensic: Number of outstanding requests - sustained for 5 minutes - Yellow(>50)._F2845274_EAC4_4808_80EE_82267EC93534_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_f293dc1d_eb1b_40cd_9363_adecc8ac82b0_KHI: At startup, the Microsoft Exchange Replication service couldn't enable the Tasks RPC listener._f293dc1d_eb1b_40cd_9363_adecc8ac82b0_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_F2E95635_8A0A_43D4_9E66_28FF5BA694A7_Forensic: The Content Filter agent process is being restarted._F2E95635_8A0A_43D4_9E66_28FF5BA694A7_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F32F607D_A16B_474B_8390_AEA70ED7859E_Forensic: Failed to generate an offline address book. The error is specified in the event description._F32F607D_A16B_474B_8390_AEA70ED7859E_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F32FCFF9_E2B1_4D77_BB36_D1D7C71665F2_Forensic: Failed to connect to remote server._F32FCFF9_E2B1_4D77_BB36_D1D7C71665F2_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F35E938A_6DC6_4ece_9A2F_200AFD1575E0_KHI: Transport Categorizer Jobs are unavailable - percentage of available categorizer jobs - Red(<90)._F35E938A_6DC6_4ece_9A2F_200AFD1575E0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTrueInternal
_F361B255_9D69_45EF_8729_997B20C805BA_Forensic: System Attendant reported an error when setting directory service notification._F361B255_9D69_45EF_8729_997B20C805BA_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F3679E4E_4A3C_4E26_ACEF_C11103434A5F_Forensic: The Microsoft Exchange Transport service doesn't have sufficient permissions to write the Pickup directory location to the registry._F3679E4E_4A3C_4E26_ACEF_C11103434A5F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F36F43CB_BE62_4AFA_B93D_6166F0743176_Forensic: Routing group configuration supported only in routing groups with Exchange 2003 servers._F36F43CB_BE62_4AFA_B93D_6166F0743176_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_f39dc3a7_a897_4d31_abdb_9cd53c88e16c_KHI: The Exchange store encountered a stack overflow._f39dc3a7_a897_4d31_abdb_9cd53c88e16c_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_f39f4de7_595f_40c1_bfb7_005f2fc2262f_KHI: The World Wide Web Publishing Service (W3Svc) isn't running._f39f4de7_595f_40c1_bfb7_005f2fc2262f_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_f46f2b5f_9861_4d71_97f7_b6259752e1fb_KHI: The mounted database copy is experiencing a critically high log file write latency. The rate is sustained for at least 5 minutes._f46f2b5f_9861_4d71_97f7_b6259752e1fb_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_F470EE33_2566_4AFD_9D6E_47CA384DF11A_NonServiceImpacting: An Exchange Control Panel connectivity (Internal) transaction failure occurred. Test-ECPConnectivity must be run on an Exchange server._F470EE33_2566_4AFD_9D6E_47CA384DF11A_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_F4733DC4_57DC_400f_B0A8_5DF9D77C9298_KHI: MSExchange Assistants RPC timout to store. Assistants Infrastructure is no longer getting responses from store._F4733DC4_57DC_400f_B0A8_5DF9D77C9298_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F47991A9_F886_49AB_A16B_F4EB4BA25A6A_Forensic: The Content Filter encountered an error while trying to scan the message. This message hasn't been assigned a spam confidence level (SCL) value._F47991A9_F886_49AB_A16B_F4EB4BA25A6A_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_f4b40d85_3c73_438f_9175_b2b26c5d783e_KHI: Couldn't load the Exchange store because the distinguished name (DN) of the message database doesn't match the DN of directory._f4b40d85_3c73_438f_9175_b2b26c5d783e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMountedSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_F4B98287_783F_431B_A3CB_FF80471306C5_Forensic: The SMTP connector rejected an incoming connection because the maximum number of connections for this connector has been reached._F4B98287_783F_431B_A3CB_FF80471306C5_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_f4c07953_18fa_40b2_a4f9_589645708b65_KHI: The Microsoft Exchange IMAP4 service (MSExchangeIMAP4) isn't running._f4c07953_18fa_40b2_a4f9_589645708b65_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_F4DCDFFA_0CE7_11DB_9607_00E08161165F_KHI: Exchange was unable to execute the diagnostic cmdlet to probe the POP3 connectivity state._F4DCDFFA_0CE7_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_F50A719B_6E5A_4bf5_B5C3_61619CF658A4_KHI: Database copy isn't keeping up with the changes on the active database copy and has failed._F50A719B_6E5A_4bf5_B5C3_61619CF658A4_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_f517984d_9ae2_4849_bb08_69d54c55acf3_KHI: The Microsoft Exchange Search Indexer service (MSExchangeSearch) is not running._f517984d_9ae2_4849_bb08_69d54c55acf3_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_F544640E_0DA2_42B4_8C3D_7C7842E9BCA7_KHI: A folder couldn't be created to cache the current Outlook Web App process. Other processes may be using the same directory._F544640E_0DA2_42B4_8C3D_7C7842E9BCA7_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeFalseInternal
_F55216AB_C56B_4e97_99CD_E9B6B048BBAF_KHI: A POP3 connectivity transaction failure occurred. The mailbox isn't enabled for the user._F55216AB_C56B_4e97_99CD_E9B6B048BBAF_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_F6312D70_E65C_46EE_B34A_D8A052C349CE_Forensic: The SMTP Receive connector rejected the specified error message because of a database issue._F6312D70_E65C_46EE_B34A_D8A052C349CE_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F658E443_7DF4_43ff_9FE2_BAC22EE520F0_KHI: A POP3 connectivity transaction failure occurred. The mailbox database wasn't found._F658E443_7DF4_43ff_9FE2_BAC22EE520F0_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_F664F001_520F_4B47_81A0_A8E4B6B3CAFE_Forensic: Name Service Provider Interface (NSPI) Proxy could not listen on a listening socket. The Winsock subsystem returned an error._F664F001_520F_4B47_81A0_A8E4B6B3CAFE_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_f670cca0_2bd4_4d1c_80b6_8deac578dfa0_KHI: The Exchange Information Store cannot contact Active Directory._f670cca0_2bd4_4d1c_80b6_8deac578dfa0_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeFalseInternal
_F6B6DE7D_142E_49E7_99B0_84B3415E6B14_Forensic: A column in the Extensible Storage Engine (ESE) contains an incorrect data type._F6B6DE7D_142E_49E7_99B0_84B3415E6B14_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F71A38DC_5DD9_4E35_86F6_8734663ECE12_Forensic: Can't open or rename file in the Pickup directory. As a result, some mail may not be processed by Pickup. For more information, review the event description._F71A38DC_5DD9_4E35_86F6_8734663ECE12_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F7D79410_7010_41BE_BDDF_03EC9256EB0B_KHI: The SmtpReceive process failed to start listening on a configured binding because IPv6 is not enabled._F7D79410_7010_41BE_BDDF_03EC9256EB0B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F800605A_1613_4EC1_980D_342395E4B4B9_Forensic: Active Mailbox Delivery Queue Length - sustained for 5 minutes - Yellow(>200) - Hub Transport._F800605A_1613_4EC1_980D_342395E4B4B9_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_F814A43C_553E_4D5A_A77D_08A69E63C648_Forensic: The MSExchangeAL service start is slow due to network issues. The service will retry until successful._F814A43C_553E_4D5A_A77D_08A69E63C648_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F87D9C72_3C0A_48C5_AFCD_85D9E7373ED4_Forensic: Unable to generate the e-mail address; unable to load address module for this address type._F87D9C72_3C0A_48C5_AFCD_85D9E7373ED4_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_F92E5CFA_7C6A_4dc5_9C0D_A8312BD394B6_KHI: Unexpected Extensible Storage Engine (ESE) error encounterd by Microsoft Exchange Replication service._F92E5CFA_7C6A_4dc5_9C0D_A8312BD394B6_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_F953F28C_F63E_4539_A4B5_02072902A8DF_KHI: UM connectivity (Local Voice) transaction failure._F953F28C_F63E_4539_A4B5_02072902A8DF_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_F9980BEC_F540_48CA_8B4A_DDA9DE4CF21C_Forensic: MSExchangeFDS:OAB: Download Tasks Queued - sustained for 10 hours - Yellow (>5)._F9980BEC_F540_48CA_8B4A_DDA9DE4CF21C_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceMicrosoft.Exchange.2010.ClientAccessFileDistributionService.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_FA178B04_F2C2_4B17_8CEA_505F3EF195D3_KHI: An Outlook Web App connectivity (External) transaction failure occurred. The test credentials can't be used to test Outlook Web App._FA178B04_F2C2_4B17_8CEA_505F3EF195D3_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_FalseInternal
_FA9231CF_C89C_4B09_91C6_88C1A3CDF215_Forensic: Spam quarantine message generation may fail because there was an error reading the quarantine mailbox configuration from the directory._FA9231CF_C89C_4B09_91C6_88C1A3CDF215_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FAA26241_35B9_4c2c_A699_2154D04D2A46_Forensic: Percent of Active Hub Servers over last 10 minutes - Yellow(<50) - Edge Server._FAA26241_35B9_4c2c_A699_2154D04D2A46_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTrueInternal
_FAB9D2BA_3CC7_4456_8163_359F090BACB4_Forensic: A configuration object in Active Directory isn't valid so an exception occurred._FAB9D2BA_3CC7_4456_8163_359F090BACB4_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_fac565f5_0c85_4f8a_b616_703de922c630_KHI: The Microsoft Exchange Protected Service Host service (MSExchangeProtectedServiceHost) isn't running._fac565f5_0c85_4f8a_b616_703de922c630_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTrueInternal
_FB5668CF_C83B_47EB_A731_D51C8ACF4243_Forensic: The Preload Filter for the DN could not be parsed. This filter will not be used._FB5668CF_C83B_47EB_A731_D51C8ACF4243_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FBA001F6_0AD9_4856_AC48_415FCC8EB725_KHI: Exceeded the supported mount limit of local database copies._FBA001F6_0AD9_4856_AC48_415FCC8EB725_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_FBC8126C_AF83_4FB6_983F_BFD6A2852E48_Forensic: File Distribution Service: Unhandled exception occurred in worker thread. Current synchronization task is aborted._FBC8126C_AF83_4FB6_983F_BFD6A2852E48_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FBD030F5_15B3_4E71_88DE_7E73963F0DD0_Forensic: Name Service Provider Interface (NSPI) Proxy failed to connect to the global catalog._FBD030F5_15B3_4E71_88DE_7E73963F0DD0_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FC13B263_138B_4E48_A1C1_1BB61017FB19_Forensic: The download of the Microsoft Exchange Anti-Spam Update failed with an error._FC13B263_138B_4E48_A1C1_1BB61017FB19_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FC4B398A_5C77_43C5_A94F_3F30FE9ACD47_Forensic: System Attendant reported an error in its Directory Service (DS) Monitoring thread._FC4B398A_5C77_43C5_A94F_3F30FE9ACD47_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FE0B82BA_A133_43ef_8C47_E7A09CBAB427_KHI: The Mserv lookup resulted in the same partner ID as the current site. It's possible that a provisioning error occurred._FE0B82BA_A133_43ef_8C47_E7A09CBAB427_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FE67AD60_FC99_4E52_AF4F_7E8847845942_Forensic: The transport process could not load poison message information from the registry. Access to the registry failed with the specified error._FE67AD60_FC99_4E52_AF4F_7E8847845942_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FE891CAD_6EE7_4E7C_A862_FFF08403AAD9_KHI: UM Connectivity (Local Voice) transaction failure - Active Directory error encountered._FE891CAD_6EE7_4E7C_A862_FFF08403AAD9_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_FalseInternal
_FED191CC_0CE7_11DB_9607_00E08161165F_KHI: POP3 connectivity couldn't be tested._FED191CC_0CE7_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.FalseInternal
_FEFD8C31_AB54_401F_8A55_44695D03A30F_Forensic: OABGen supports only alphanumeric and space characters for the offline address name. This OAB will not be generated._FEFD8C31_AB54_401F_8A55_44695D03A30F_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_FF01B4ED_E75A_4E19_9862_0AF62019B0D0_Forensic: A transport rules agent caused an unhandled exception._FF01B4ED_E75A_4E19_9862_0AF62019B0D0_Microsoft.Exchange.2010.CommonTransportAgentsMicrosoft.Exchange.2010.CommonTransportAgents.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal
_ff27c57f_187b_4a0d_adba_3588b2fbb311_KHI: Apparent configuration problem on a database copy or a file/directory is missing due to a storage failure._ff27c57f_187b_4a0d_adba_3588b2fbb311_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseFalseCorrelation.StatefulWindowsEventMonitorTypeTrueInternal
_FF62662A_9F83_43E9_A684_D386526AFBB6_KHI: Remote PowerShell connectivity (Internal) failures._FF62662A_9F83_43E9_A684_D386526AFBB6_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_FalseInternal
_FF7B3495_2AAA_447F_AE79_99F8CCA8AC4E_Forensic: An attempt was made to use the Cluster Remote Procedure Call (RPC) interface without proper permissions._FF7B3495_2AAA_447F_AE79_99F8CCA8AC4E_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTrueInternal