Home
  •  

All Unit Monitors in Microsoft.Exchange.2010 Management Pack

 DisplayNameDescriptionIDTargetParent MonitorCategoryEnabledInstance NameCounter NameFrequencyAlert GenerateAlert SeverityAlert PriorityAlert Auto ResolveMonitor TypeRemotableAccessibilityRunAs
ExchangeRequiredHotfixesNotInstalledThe required SCOM hotfixes for Exchange MP are not installed.ExchangeRequiredHotfixesNotInstalledMicrosoft.SystemCenter.HealthServiceSystem.Health.AvailabilityStateCustomTrue0TrueErrorNormalTrueMicrosoft.Windows.TimedScript.TwoStateMonitorTypeTruePublic
Microsoft.Exchange.2010.Auditing.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Auditing.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.AuditingMicrosoft.Exchange.2010.Auditing.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessImap4.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessImap4.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessPop3.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.ClientAccessPop3.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonActiveDirectoryAccess.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonBestPracticeAnalyzer.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.CommonBestPracticeAnalyzer.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonBestPracticeAnalyzerMicrosoft.Exchange.2010.CommonBestPracticeAnalyzer.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonDomainController.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonDomainController.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.CommonTransport.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.HubTransportQueues.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.HubTransportQueues.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.AcrossCluster.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.AcrossClusterMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.Assistants.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.Assistants.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.AssistantsMicrosoft.Exchange.2010.Mailbox.Assistants.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.ContentIndexingServiceMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchableMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopyMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.Mailbox.MailSubmission.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.MailboxSystemAttendant.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.MonitoringCorrelationEngine.ForensicOverallHealthAvailabilityHealthForensic: Overall HealthMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
Microsoft.Exchange.2010.UnifiedMessaging.Availability.Service.NonServiceImpactingOverallHealthAvailabilityHealthNonServiceImpacting: Overall HealthMicrosoft.Exchange.2010.UnifiedMessaging.Availability.Service.NonServiceImpactingOverallHealthAvailabilityHealthMicrosoft.Exchange.2010.UnifiedMessaging.Availability.ServiceMicrosoft.Exchange.2010.UnifiedMessaging.Availability.Service.NonServiceImpactingDataContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.SingleEventLogTimer2StateMonitorTypeTruePublic
MSExchangeKerbCredPasswordUpdateNotDetectedKerberos Authentication for CAS array - shared alternate service account credential password for Kerberos authentication has not been updated in 28 days and may be staleThis only applies if a shared credential is in use to allow Kerberos authentication. Successful password update has not been detected for the shared service account used by CAS array machines to perform Kerberos authentication. RollASACredentialPassword.ps1 has not been run and password may be stale. If the shared service account password expires, on-site Outlook connection outage may result.MSExchangeKerbCredPasswordUpdateNotDetectedMicrosoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateCustomFalse0TrueErrorNormalTrueMicrosoft.Windows.MissingEventLogSingleEventLog2StateMonitorTypeTrueInternal
MSExchangeMonitoringCorrelationConnectivityToRMSMicrosoft Exchange Monitoring Correlation service (MSExchangeMonitoringCorrelation) connectivity to RMS.MSExchangeMonitoringCorrelationConnectivityToRMSMicrosoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0TrueMatchMonitorHealthNormalTrueMicrosoft.Windows.RepeatedEventLogSingleEventLog2StateMonitorTypeTruePublic
MSExchangeMonitoringCorrelationNotRunningThe Microsoft Exchange Monitoring Correlation service (MSExchangeMonitoringCorrelation) is not running.MSExchangeMonitoringCorrelationNotRunningMicrosoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0TrueMatchMonitorHealthNormalTrueMicrosoft.Windows.CheckNTServiceStateMonitorTypeTruePublic
_004C6F78_DCEA_4df7_82C1_F5A7B04E1FF6_KHI: An IMAP4 connectivity transaction failure occurred. The mailbox database isn't unique._004C6F78_DCEA_4df7_82C1_F5A7B04E1FF6_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_0074C3C8_A6E4_49e6_A67F_5ED6A2BE016D_KHI: Content Aggregation Subscription Dispatch Submission Failures - increase over 3 hours - Red(>1000)._0074C3C8_A6E4_49e6_A67F_5ED6A2BE016D_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.DeltaThresholdTruePublic
_0079b07e_8b0e_43c7_85a4_ac3ddee70b90_KHI: Didn't recover a database failure of a replicated database because the attempted failover failed._0079b07e_8b0e_43c7_85a4_ac3ddee70b90_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_00E61208_49F1_491e_84AD_C4B00C6D7882_KHI: The Microsoft Exchange Replication service is consuming excessive memory._00E61208_49F1_491e_84AD_C4B00C6D7882_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_01940C47_6D13_46A7_99CE_F480A639DB75_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 6 for the cause._01940C47_6D13_46A7_99CE_F480A639DB75_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_019EC805_7FE6_4F51_B3AD_63873754FCF1_KHI: System Attendant requires the ABV DG dll for offline address book generation but it cannot be loaded._019EC805_7FE6_4F51_B3AD_63873754FCF1_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0216038C_4F56_4AA7_8F8C_340B773B4271_KHI: The database disk is full. Deleting log files is not recommended and could stop the database from starting._0216038C_4F56_4AA7_8F8C_340B773B4271_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_026E0E71_A5B3_4781_8FBA_E29D7FC4225D_KHI: Retry Remote Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport._026E0E71_A5B3_4781_8FBA_E29D7FC4225D_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_028fe911_5c8f_44e9_8f4c_b6be88969139_KHI: The server is having difficulty becoming an active member of its database availability group._028fe911_5c8f_44e9_8f4c_b6be88969139_Microsoft.Exchange.2010.Mailbox.ClusterServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_033e8055_4533_49c1_a07f_30ef364551c8_KHI: The Microsoft Exchange RPC Client Access service (MSExchangeRPC) isn't running._033e8055_4533_49c1_a07f_30ef364551c8_Microsoft.Exchange.2010.CommonMSExchangeRPCServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_0341F174_4E35_4FDC_A8F9_A96A0073C349_KHI: Unable to create a new log file because the database can't write to the log drive. Drive may be out of space or incorrectly configured._0341F174_4E35_4FDC_A8F9_A96A0073C349_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_035DE000_CD1C_4789_9E91_229192B4C7B3_KHI: Outlook Web App failed to initialize. No default theme was found. Review MSExchangeOWA event 26 for the cause._035DE000_CD1C_4789_9E91_229192B4C7B3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_03BC2341_139C_4983_A449_1B69E0E6798F_KHI: Outlook Web App failed to initialize. A required small icon configuration file doesn't exist._03BC2341_139C_4983_A449_1B69E0E6798F_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_04585F0D_1045_489F_98F3_1A05E451E230_KHI: The Test-ECPConnectivity (Internal) diagnostic cmdlet failed to run._04585F0D_1045_489F_98F3_1A05E451E230_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_04982720_F096_4718_A7DB_8A5F49EBCBA9_KHI: Initialization of outbound authentication failed with the specified error for the Send connector._04982720_F096_4718_A7DB_8A5F49EBCBA9_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_062c6ad6_7f15_446d_8337_c231ee193127_KHI: Multiple mailboxes on this database have been quarantined._062c6ad6_7f15_446d_8337_c231ee193127_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_06C2CA66_F320_4576_8FD2_3DE05742A109_KHI: Disk \% Free Space low - Red(<10\%)._06C2CA66_F320_4576_8FD2_3DE05742A109_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_06D93572_F119_4992_A510_AD212A7536BA_KHI: Outlook Web App failed to initialize. A referenced forms registry folder doesn't exist. Review MSExchangeOWA event 2 for the cause._06D93572_F119_4992_A510_AD212A7536BA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_071afc0e_2643_4daa_af18_56d8c730d212_KHI: The database copy is experiencing an unusually high log generation rate (bytes written/second) for a sustained period of at least 15 minutes._071afc0e_2643_4daa_af18_56d8c730d212_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_0723763E_2A8B_4204_9B84_0864D8BB307A_KHI: The Outlook Web App proxy or redirection failed because one of the service discovery entries isn't valid._0723763E_2A8B_4204_9B84_0864D8BB307A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0759EFF1_CF43_4BA3_B372_B55BD34FA198_KHI: Test-SmtpConnectivity has been unable to verify receive connector functionality twice in the last 10 minutes._0759EFF1_CF43_4BA3_B372_B55BD34FA198_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_SmtpConnectivity_diagnostic_cmdlet.TruePublic
_07842286_170a_45e9_b113_d02979ad3012_KHI: MSExchange Mailbox Replication service isn't responding to RPC/WCF ping._07842286_170a_45e9_b113_d02979ad3012_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_0788007B_95D3_4286_9E24_B4C2FF66FEE2_KHI: Detected indexing backlog on search catalog._0788007B_95D3_4286_9E24_B4C2FF66FEE2_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_07d140b8_ec07_48fa_80d1_143351878539_KHI: The Microsoft Exchange Unified Messaging service rejected a call because the UM pipeline is full._07d140b8_ec07_48fa_80d1_143351878539_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PipelineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_07F74BE9_F036_4A24_8DA7_FB3614DBCC8A_NonServiceImpacting: The internal Web Services connectivity transaction failed. The Test-WebServicesConnectivity cmdlet must be run on a Client Access server._07F74BE9_F036_4A24_8DA7_FB3614DBCC8A_Microsoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_083326D9_B48D_448c_8B9F_685A9D026B18_KHI: Invalid Account Credentials/Unable to Authenticate_083326D9_B48D_448c_8B9F_685A9D026B18_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_08C092E8_FD6F_48b2_BA1E_473C3B84A2F3_KHI: Indexing stall >1 hr for 2 hours_08C092E8_FD6F_48b2_BA1E_473C3B84A2F3_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_08C444A4_F26E_48fa_9617_DA4ED23C740F_KHI: An error occurred while running the Test-CalendarConnectivity cmdlet in external mode._08C444A4_F26E_48fa_9617_DA4ED23C740F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_CalendarConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_08F29081_008F_4a49_A9DA_FB1BE58AC92E_KHI: LDAP Disconnects per minute - sustained for 2 minutes - Yellow(>20)._08F29081_008F_4a49_A9DA_FB1BE58AC92E_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_08FF3D95_1008_41ED_B445_EA60E1E732A0_KHI: The agent encountered a problem when trying to load the file that lists the supported mobile operators and their capabilities._08FF3D95_1008_41ED_B445_EA60E1E732A0_Microsoft.Exchange.2010.HubTransportAgentsSMSSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_09A36DA2_126A_47cf_BDA7_F80022305B5E_KHI: The Transport queue database is experiencing an unusually high log generation checkpoint depth over last 15 min - Yellow(>400)._09A36DA2_126A_47cf_BDA7_F80022305B5E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_09A5E870_C3E5_4052_AB66_47C194F0C419_KHI: Exchange couldn't read the Receive connector configuration so the service will be stopped._09A5E870_C3E5_4052_AB66_47C194F0C419_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_09c7e43d_4aba_41f8_9079_3882b0cf7d7f_KHI: Querying taking too long: Exchange Search Slow First Batch is over 10._09c7e43d_4aba_41f8_9079_3882b0cf7d7f_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_09DCCBB6_71A6_4fcd_A44E_84EC37324D7B_KHI: The Exchange store has detected a database level RPC request timeout._09DCCBB6_71A6_4fcd_A44E_84EC37324D7B_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_09DF01C7_9631_4AEA_B412_CA527D9F4ADC_KHI: The service could not be initialized because the necessary entry point could not be found._09DF01C7_9631_4AEA_B412_CA527D9F4ADC_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0A52A377_60C4_463C_98A3_DC4B52324C41_KHI: MSExchangeFDS:OAB: Download Tasks Queued - sustained for 10 hours - Red (>10)._0A52A377_60C4_463C_98A3_DC4B52324C41_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_0a64f4a7_54ff_4d95_ab0b_4fbd7db0947d_KHI: EdgeSync MSERV synchronization failures._0a64f4a7_54ff_4d95_ab0b_4fbd7db0947d_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_TruePublic
_0AB3C47D_926F_46E8_ACA2_81BEEAB00A4E_KHI: The Outlook Web App proxy failed because it couldn't find a trusted certificate for SSL encryption._0AB3C47D_926F_46E8_ACA2_81BEEAB00A4E_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0B505ABC_05BA_4185_B6C1_A9DBC1ADE905_KHI: Exchange was unable to quarantine a message because the spam quarantine mailbox is invalid. Please configure the quarantine mailbox._0B505ABC_05BA_4185_B6C1_A9DBC1ADE905_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0b531ab6_b00c_4930_b4b7_ae87f7478d6c_KHI: A failure was detected that may impact all copies of the database. The database has been dismounted._0b531ab6_b00c_4930_b4b7_ae87f7478d6c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_0F414B81_91AC_4B7C_B1E4_9E07EAC508D1_KHI: Couldn't initialize the Content Filter agent because a required file couldn't be found on your system._0F414B81_91AC_4B7C_B1E4_9E07EAC508D1_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0F5868CB_638D_4600_BE92_1F0074A3E00F_KHI: A required log file is missing on the active copy. Continuous replication is blocked for this database._0F5868CB_638D_4600_BE92_1F0074A3E00F_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_0F6A777B_970D_4fbe_98A8_FAFDEC0990CC_KHI: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility._0F6A777B_970D_4fbe_98A8_FAFDEC0990CC_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_0fdc40b1_6cc3_4385_8d7e_084b3c10a40c_KHI: Unable to initialize the Exchange store due to the clocks on the client and server not being synchronized._0fdc40b1_6cc3_4385_8d7e_084b3c10a40c_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_10058a4d_73df_47ca_89b1_e13a45b9ea23_Forensic: Mail submission is not keeping up with the work being presented by the changes to the locally mounted databases._10058a4d_73df_47ca_89b1_e13a45b9ea23_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_102f42a5_da66_4792_b71b_8d8aeef944cb_Forensic: The server is a member of a database availability group and other servers are currently not operational._102f42a5_da66_4792_b71b_8d8aeef944cb_Microsoft.Exchange.2010.Mailbox.AcrossClusterMicrosoft.Exchange.2010.Mailbox.AcrossCluster.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_1043C166_48C9_11DF_82F6_94B555D89593_KHI: A process serving an application pool failed to respond to a ping. See the system event log for more information._1043C166_48C9_11DF_82F6_94B555D89593_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_108E4F87_A860_4650_86DB_48E4FF303874_KHI: System Attendant failed to read the membership of the universal security group._108E4F87_A860_4650_86DB_48E4FF303874_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_10A0B117_F8F9_44ae_BAB4_D3135C88F7AD_KHI: Failed to execute Troubleshoot-CI.ps1._10A0B117_F8F9_44ae_BAB4_D3135C88F7AD_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Troubleshoot_CI_diagnostic_script.TruePublic
_10a2b32c_b844_44f1_b750_d5150e0b249c_KHI: The database copy is very low on log volume space. The volume has reached critical levels._10a2b32c_b844_44f1_b750_d5150e0b249c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_10A36ED9_C6EE_40cf_9554_DD6F819EA2B3_KHI: Outlook Web App failed to initialize. No default theme was found. Review MSExchangeOWA event 107 for the cause._10A36ED9_C6EE_40cf_9554_DD6F819EA2B3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_11A19FCF_E4B0_4FEF_A733_0BBC7FE90278_KHI: A transport rules agent failed to create an agent instance._11A19FCF_E4B0_4FEF_A733_0BBC7FE90278_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_11e5fc9c_366e_4b85_aa75_6cb7f73034bb_KHI: Low or out of disk space will dismount or terminate replication on a database copy._11e5fc9c_366e_4b85_aa75_6cb7f73034bb_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_12682d82_4fe5_409e_80c5_ae940460be66_KHI: A user mailbox has reached the recoverable items quota limit._12682d82_4fe5_409e_80c5_ae940460be66_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_12907C37_F3FC_4aa7_9FBB_CF4F31A93B97_KHI: Aggregate Delivery Queue Length (All Queues) - sustained for 15 minutes - Red(>5000) - Hub Transport._12907C37_F3FC_4aa7_9FBB_CF4F31A93B97_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_12E827EE_60C3_4831_A24E_36AC3E1EE288_KHI: A secure connection from a domain-secured domain failed to authenticate because validation of the TLS certificate failed._12E827EE_60C3_4831_A24E_36AC3E1EE288_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_131D42D4_83AD_4ace_B554_5B1D9EA5BAD8_KHI: Could not run the Test-EdgeSyncMserv diagnostic cmdlet._131D42D4_83AD_4ace_B554_5B1D9EA5BAD8_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_TruePublic
_133a8a56_6b9c_44e0_886c_40b6a07d74c2_KHI: The database copy is experiencing an unusually high log generation checkpoint depth for a sustained period of at least 15 minutes._133a8a56_6b9c_44e0_886c_40b6a07d74c2_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_135D27C1_F1F2_4efa_8EC7_7BB223F4E304_KHI: HTTP Service Request Queues: CurrentQueueSize Yellow>200_135D27C1_F1F2_4efa_8EC7_7BB223F4E304_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_136B26D6_36DA_40dc_855D_BDD98AD614C0_KHI: MSExchange OWA: Connection Failed Transient Exception Percentage Red>10_136B26D6_36DA_40dc_855D_BDD98AD614C0_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_13AA616E_967C_4EAA_9953_FB699407119C_NonServiceImpacting: Exchange Control Panel connectivity (External) transaction failure - Test-ECPConnectivity must be run on an Exchange server._13AA616E_967C_4EAA_9953_FB699407119C_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_13d1da8f_9988_1111_8620_0e1e1aeeeee1_KHI: UMWorkerProcess Rejected Calls \% over the last 1 hour - Red (> 10)._13d1da8f_9988_1111_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_13d1da8f_9988_4c9f_8620_0e1e1aeeeee1_KHI: UM Service Rejected Calls \% over the last 1 hour - Red (> 10)._13d1da8f_9988_4c9f_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_13d1da8f_9988_4c9f_8620_0e1e1afffff1_KHI: UM Service Rejected Calls \% over the last 1 hour - Yellow (> 5)._13d1da8f_9988_4c9f_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_13d1da8f_9989_2222_8620_0e1e1afffff1_KHI: UMWorkerProcess Rejected Calls \% over the last 1 hour - Yellow (> 5)._13d1da8f_9989_2222_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_13E048C9_CEC5_4ED8_96C9_F6D309D2B0E8_KHI: The database page read failed verification because of error -1018. This database error is often caused by hardware issues._13E048C9_CEC5_4ED8_96C9_F6D309D2B0E8_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_141eb379_0435_429b_8580_344d329703f5_KHI: A lost flush on the active database copy was detected by the passive database copy on the local server._141eb379_0435_429b_8580_344d329703f5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_144165FF_F44B_46d0_B310_FEE0654172BB_Forensic: MSExchangePop3: Transient Active Directory Errors Rate Red>10 per min_144165FF_F44B_46d0_B310_FEE0654172BB_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_1457FBC4_164B_4e8e_8A03_AA4A2A245411_Forensic: Error occurred while executing the Test-AssistantHealth diagnostic cmdlet._1457FBC4_164B_4e8e_8A03_AA4A2A245411_Microsoft.Exchange.2010.Mailbox.AssistantsMicrosoft.Exchange.2010.Mailbox.Assistants.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_14E06256_D37A_4a86_9F54_C2663E8037A6_KHI: The database copy is low on log volume space. The volume is 50\% free._14E06256_D37A_4a86_9F54_C2663E8037A6_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_152000A6_90AF_46BC_B1CB_259F45917020_Forensic: Unable to move mailbox._152000A6_90AF_46BC_B1CB_259F45917020_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_1524c5ca_250f_4c06_9f19_573fab9636e6_KHI: The Exchange store has failed to initialize._1524c5ca_250f_4c06_9f19_573fab9636e6_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_1531FD0F_C0E4_4233_B580_E0DF0D4B1632_KHI: Disk Free Megabytes low - Red(<20MB)._1531FD0F_C0E4_4233_B580_E0DF0D4B1632_Microsoft.Exchange.2010.CommonServerSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_157E6526_9974_4b99_818F_0EC5EE27A55E_KHI: A POP3 connectivity transaction failure occurred. The Client Access server wasn't found._157E6526_9974_4b99_818F_0EC5EE27A55E_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_165DF048_FCC7_40a0_90A3_4028332F122C_Forensic: Detected catalog corruption._165DF048_FCC7_40a0_90A3_4028332F122C_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopyMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_16CE8C45_956A_42E7_A12C_5A238EB6598A_KHI: The WebReady Document Viewing worker application can't be found._16CE8C45_956A_42E7_A12C_5A238EB6598A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_17bec0c6_8c9d_41c2_9aac_624ee17cea09_KHI: The Exchange store failed to start because it is out of memory._17bec0c6_8c9d_41c2_9aac_624ee17cea09_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_17FA72A1_46F1_4ea2_B8B0_903259C40997_KHI: A startup inspection error occurred on one or more log files and/or the database file._17FA72A1_46F1_4ea2_B8B0_903259C40997_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_182376A0_FB16_4c26_A28C_D653BE6E8FF6_Forensic: MSExchangePop3: Permanent Storage Errors Rate Red>10 per min_182376A0_FB16_4c26_A28C_D653BE6E8FF6_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_187BFAE3_64C3_4869_9131_133228D6BE36_KHI: Client Access Server: Approaching too many TCP v4 connections Red>58981_187BFAE3_64C3_4869_9131_133228D6BE36_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_1893EE98_7AB4_4067_95D1_DAC7DCE5B77D_KHI: A file from a theme folder couldn't be parsed._1893EE98_7AB4_4067_95D1_DAC7DCE5B77D_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_18bebc51_d05c_44f6_91e6_24193d14fe48_Forensic: The Exchange Topology discovery couldn't find the local Exchange server in Active Directory._18bebc51_d05c_44f6_91e6_24193d14fe48_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_1991A842_E1B4_4f69_B99F_2F63D2788EF8_KHI: HTTP Service Request Queues: RejectionRate Red>10_1991A842_E1B4_4f69_B99F_2F63D2788EF8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_19BFC570_8EA9_42EB_B3F7_0F40F2A00119_KHI: UM Connectivity (Local Voice) transaction failure - Microsoft Exchange Unified Messaging service isn't installed or running._19BFC570_8EA9_42EB_B3F7_0F40F2A00119_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_1a56b19b_fde3_4c8c_ac08_f867c9b752f1_KHI: Monitoring failed to run the Test-MAPIConnectivity cmdlet._1a56b19b_fde3_4c8c_ac08_f867c9b752f1_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_TruePublic
_1A572C8B_1982_42cd_88E4_E4B6F225441A_KHI: Mailbox: Approaching too may client logons on Mailbox Red>54000_1A572C8B_1982_42cd_88E4_E4B6F225441A_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_1A6C7853_EB10_4e40_BC6B_6C0F38AFEF7C_KHI: The Exchange Transport service is rejecting message submissions due to memory consumption higher than the configured threshold._1A6C7853_EB10_4e40_BC6B_6C0F38AFEF7C_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1A902E0E_6411_458C_A510_EC91E8236B8C_KHI: MSExchangeFDS:OAB: Download Tasks Completed - sustained for 24 hours - Red (= 0)._1A902E0E_6411_458C_A510_EC91E8236B8C_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_1a96d639_44dc_4231_988b_34c76a343988_KHI: The Microsoft Exchange Replication service failed to resolve the FQDN for the short name. Please check the Application event logs for MSExchangeRepl event 4116._1a96d639_44dc_4231_988b_34c76a343988_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1ab0e09d_e98c_4596_a5e1_d3b531ca0eda_KHI: The Microsoft Exchange Mail Submission service (MSExchangeMailSubmission) isn't running._1ab0e09d_e98c_4596_a5e1_d3b531ca0eda_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_1AEF24AC_AE80_468C_862E_401A843577FB_KHI: Unable to roll back operation on database: all future updates will be rejected._1AEF24AC_AE80_468C_862E_401A843577FB_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1AF4D65D_A7EB_456E_8C56_84F00B7A63AD_KHI: Exchange was unable to load the STARTTLS certificate from the local store because of a mismatch with what was configured on connector FQDN._1AF4D65D_A7EB_456E_8C56_84F00B7A63AD_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1AF95FDC_5667_451a_A843_F46A830888F8_Forensic: Detected indexing stall on search catalog._1AF95FDC_5667_451a_A843_F46A830888F8_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopyMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_1BBFF44E_2F95_4AE4_AE46_78CA8FD50A51_KHI: UM Connectivity (Local Voice) transaction failure - Call wasn't answered before time-out._1BBFF44E_2F95_4AE4_AE46_78CA8FD50A51_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_1C1E98AC_DA9D_4D4C_AE9B_B15609382C89_KHI: The Transport Log Search service failed to create the message tracking log directory because of an error._1C1E98AC_DA9D_4D4C_AE9B_B15609382C89_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1C40945A_92BF_478c_9D27_614CE2D73C4E_KHI: The 'Manage auditing and security log' permission is removed from the Exchange Servers group on one or more domain controllers._1C40945A_92BF_478c_9D27_614CE2D73C4E_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_1C56328B_E3CF_4EF3_ACA6_4B8137B8310D_Forensic: Failed to retrieve the monitoring states or state change events for a monitoring object. This is usually a transient issue._1C56328B_E3CF_4EF3_ACA6_4B8137B8310D_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1C721700_5321_4220_84E7_906185D98DFA_KHI: Failed to execute the Test-PowerShellConnectivity (Internal) diagnostic cmdlet._1C721700_5321_4220_84E7_906185D98DFA_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_1CAECD0F_397A_4A49_AE54_C73E868D2012_KHI: Outlook Web App failed to initialize. A referenced theme folder is missing. Review MSExchangeOWA event 18 for the cause._1CAECD0F_397A_4A49_AE54_C73E868D2012_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_1cb9f62f_9cc9_498c_9fab_8708c9f1130e_KHI: The database copy is low on database volume space. The volume is 25\% free._1cb9f62f_9cc9_498c_9fab_8708c9f1130e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_1CF66670_63EC_453B_B540_E8E1151DDA00_KHI: Could not open LDAP session to Active Directory using local service credentials. Cannot access Address List configuration information._1CF66670_63EC_453B_B540_E8E1151DDA00_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_1E253B35_A392_4ec0_8C82_A9D63524E627_KHI: The database copy is low on log volume space. The volume has reached critical levels (15\% free)._1E253B35_A392_4ec0_8C82_A9D63524E627_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_1e282469_a610_4503_9d78_140e528b8cec_KHI: Mail Submission Service is experiencing issues: Messages Queued For Submission - sustained for 15 minutes - Red (>25)._1e282469_a610_4503_9d78_140e528b8cec_Microsoft.Exchange.2010.Mailbox.DatabaseCopySubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_204F2149_CB86_4a63_B530_DC13C9491CAB_KHI: Unable to create the required directory for the database copy. Please check the file system permissions._204F2149_CB86_4a63_B530_DC13C9491CAB_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_20E23661_C55B_4cf1_8D5F_E85850B4D016_KHI: A certificate used for federation is about to expire._20E23661_C55B_4cf1_8D5F_E85850B4D016_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2133FDD1_2E95_4474_9EB5_5429102CC7E8_KHI: The database copy is low on log volume space. The volume has reached error levels (35\% free)._2133FDD1_2E95_4474_9EB5_5429102CC7E8_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_21FEEA43_017B_41C6_8282_96E700E822E8_KHI: An accepted domain entry was found to be corrupt in Active Directory so the configuration was rejected._21FEEA43_017B_41C6_8282_96E700E822E8_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2205F5BA_6785_11DF_BC88_4F1CDFD72085_KHI: Destructive Cmdlet execution throttled for first org user because of Powershell Budget_2205F5BA_6785_11DF_BC88_4F1CDFD72085_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_22a54b60_b124_4b38_8550_fd126c427d4b_KHI: EdgeSync Enterprise synchronization failures._22a54b60_b124_4b38_8550_fd126c427d4b_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSynchronization_diagnostic_cmdlet._Report_Collection_TruePublic
_22D105C7_2C52_469F_A267_1F823998B87C_Forensic: Performance counters for NSPI Proxy could not be initialized._22D105C7_2C52_469F_A267_1F823998B87C_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_230BFD33_D406_496A_8678_4106F61EB1BE_Forensic: DsProxy DLL is required but cannot be loaded._230BFD33_D406_496A_8678_4106F61EB1BE_Microsoft.Exchange.2010.MailboxSystemAttendantMicrosoft.Exchange.2010.MailboxSystemAttendant.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_234F3E09_4BB7_4756_91AC_9E52FB10222B_KHI: The Availability service request to the local server FQDN failed._234F3E09_4BB7_4756_91AC_9E52FB10222B_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.TruePublic
_23838f70_a5d3_4f6c_80f9_277912458abf_KHI: The database availability group is experiencing problems that may cause it to fail due to stale security information._23838f70_a5d3_4f6c_80f9_277912458abf_Microsoft.Exchange.2010.Mailbox.ClusterQuorumGroupSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_23B1E065_DB55_4cf2_9B47_86D8299A3B38_KHI: MSExchangeIMAP4 process is repeatedly crashing._23B1E065_DB55_4cf2_9B47_86D8299A3B38_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_23bbf71a_ed6a_4685_9e27_35b93f8d95fb_KHI: The Microsoft Exchange Replication service appears to be leaking operating system handles._23bbf71a_ed6a_4685_9e27_35b93f8d95fb_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_25212204_3031_48cf_98A8_BA833EF62979_Forensic: MSExchangeImap4: Transient Active Directory Errors Rate Red>10 per min_25212204_3031_48cf_98A8_BA833EF62979_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_2550B9AE_78EA_4e71_81C6_CF05F1F1BAB9_KHI: An IMAP4 connectivity transaction failure occurred. The session object wasn't created._2550B9AE_78EA_4e71_81C6_CF05F1F1BAB9_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_25C937CE_EF81_4397_B651_BA16BCE752EC_Forensic: Single page restore successfully corrected a detected error of a database copy._25C937CE_EF81_4397_B651_BA16BCE752EC_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_2639298E_100A_4A8D_AF1D_65F4C8827747_KHI: Outbound direct trust authentication failed for the certificate. Make sure the EdgeSync service (MSExchangeEdgeSync) is running._2639298E_100A_4A8D_AF1D_65F4C8827747_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_268B2FAF_2E2C_4493_90CE_988A37AF2D09_KHI: IMAP4 connectivity transaction failure - The Client Access Server was not specified._268B2FAF_2E2C_4493_90CE_988A37AF2D09_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_26BF0022_B749_40A7_86B2_071CD666BD53_KHI: A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 19 for the cause._26BF0022_B749_40A7_86B2_071CD666BD53_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_282A89AB_774B_4916_856B_EF01FE5377FD_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 7 for the cause._282A89AB_774B_4916_856B_EF01FE5377FD_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_28D71181_D64D_41FE_9EDE_1806EACB8AA9_KHI: Exchange could not read the Receive connector configuration. The Microsoft Exchange Transport service will be stopped._28D71181_D64D_41FE_9EDE_1806EACB8AA9_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_29B65D40_E54B_4D62_AAA9_7B401C9A161C_KHI: The worker process has failed to load the specified application configuration file. Please check the format of this file._29B65D40_E54B_4D62_AAA9_7B401C9A161C_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_29FD2784_395C_4f0e_91E7_F9C0B5071350_Forensic: MSExchangePop3: Mailbox Offline Errors Rate Red>10 per min_29FD2784_395C_4f0e_91E7_F9C0B5071350_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_2A85E102_7E5A_4EFF_A0B8_D1DA915E949B_KHI: The attempt to bind to the SourceIPAddress configured on the Send connector failed. The SourceIPAddress should be checked for correctness._2A85E102_7E5A_4EFF_A0B8_D1DA915E949B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2ACB5006_EC5F_46BA_94B6_4B5544DDEBA0_KHI: Privileges for the Exchange ActiveSync service are incorrect. Check permissions for the Exchange ActiveSync service's ASP.NET process account._2ACB5006_EC5F_46BA_94B6_4B5544DDEBA0_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2b416621_57c1_45cc_b458_5282d68b8110_KHI: An error has terminated operation of a database copy. Operation of the database copy is being restarted._2b416621_57c1_45cc_b458_5282d68b8110_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_2BCB35C6_D00D_47BB_B5E0_3D9A76ABE1E0_KHI: An invalid network adapter is specified in the Transport server DNS configuration._2BCB35C6_D00D_47BB_B5E0_3D9A76ABE1E0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2C080397_CE3C_4d05_9C37_E378AF622BF7_KHI: MSExchangeTransport process is repeatedly crashing in last 45 minutes._2C080397_CE3C_4d05_9C37_E378AF622BF7_Microsoft.Exchange.2010.HubTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_2c0bde4c_255c_4df0_8271_61e94e22bdcc_KHI: An I/O error that may be repaired by a single page restore has affected the database copy._2c0bde4c_255c_4df0_8271_61e94e22bdcc_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_2C13199D_3D9D_4297_B89F_728F5A8DD31E_KHI: The STARTTLS certificate has expired. The certificate must be renewed to resume mail flow._2C13199D_3D9D_4297_B89F_728F5A8DD31E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2C61DFFD_E80F_414f_A0FA_7F21117A009F_KHI: Submission Queue Length - sustained for 15 minutes - Red(>500) - Hub Transport._2C61DFFD_E80F_414f_A0FA_7F21117A009F_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_2D1A6864_C3CB_40a5_91A2_D27BA34739F8_KHI: A POP3 connectivity transaction failure occurred because a security error was found._2D1A6864_C3CB_40a5_91A2_D27BA34739F8_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_2D1E52F2_01C4_416D_92F2_40D4856C1523_KHI: The Test-WebServices (Internal) cmdlet failed to run._2D1E52F2_01C4_416D_92F2_40D4856C1523_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_2D48D026_AEF0_44ba_9346_C3F61C675FC6_KHI: IMAP4 connectivity transaction failure - The Client Access Server is not RPC-enabled._2D48D026_AEF0_44ba_9346_C3F61C675FC6_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_2D5C47A8_30A4_4B40_8581_E11756A78540_KHI: There was an Exchange ActiveSync connectivity (Internal) transaction failure. The Test-ActiveSyncConnectivity cmdlet must be run on a Client Access server._2D5C47A8_30A4_4B40_8581_E11756A78540_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_2E148A47_B1CA_4297_B80A_964AEEE56AF2_KHI: The Exchange store database: RPC Average Latency - sustained for 10 minutes - Red (>150 msec)._2E148A47_B1CA_4297_B80A_964AEEE56AF2_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_2E499267_8A92_4530_9EF8_43401DDC30C5_KHI: The database has copies configured, but does not have circular-logging enabled._2E499267_8A92_4530_9EF8_43401DDC30C5_Microsoft.Exchange.2010.Mailbox.DatabaseServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_CheckCircularLogging_diagnostic_script.TruePublic
_2E4A4AFF_4128_4a8c_8AF5_65E46C83D2A0_KHI: The Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) could not be stopped._2E4A4AFF_4128_4a8c_8AF5_65E46C83D2A0_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_2e5f1d59_b7f6_487c_8d98_fadfed753ce2_KHI: The Microsoft Exchange Active Directory Topology Service (MSExchangeADTopology) isn't running._2e5f1d59_b7f6_487c_8d98_fadfed753ce2_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_2E923413_DE48_436B_96C6_49034F8CA1BE_KHI: There was an Outlook Web App connectivity (External) transaction failure. The Client Access server configuration check failed._2E923413_DE48_436B_96C6_49034F8CA1BE_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_2EDDCCF1_1FD3_4340_8633_C50254DB9A26_KHI: An error occurred while running the Test-CalendarConnectivity cmdlet in internal mode._2EDDCCF1_1FD3_4340_8633_C50254DB9A26_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_CalendarConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_2EDEAC0C_FCEB_4970_986B_BCF8C2103453_KHI: Client Access Server: Approaching too many TCP v4 connections Yellow>52548_2EDEAC0C_FCEB_4970_986B_BCF8C2103453_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_2F954DCE_FA8B_43b8_8773_9961723920C6_NonServiceImpacting: MSExchangeTransport has detected a critical storage error and has taken an automated recovery action by moving the database._2F954DCE_FA8B_43b8_8773_9961723920C6_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_2FA3FD21_59B4_4567_94A7_56CA1A691442_KHI: Couldn't open a Transport database because a log file is missing or corrupted. The Transport service is shutting down._2FA3FD21_59B4_4567_94A7_56CA1A691442_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_2ffa56ef_eaea_4d69_b62f_87b49cfb60b0_KHI: MSExchangeActiveSync: Number of auto-blocked devices Red>0_2ffa56ef_eaea_4d69_b62f_87b49cfb60b0_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_3004007A_4BA2_4221_9722_359EA54861E4_Forensic: ExBPA Error._3004007A_4BA2_4221_9722_359EA54861E4_Microsoft.Exchange.2010.CommonBestPracticeAnalyzerMicrosoft.Exchange.2010.CommonBestPracticeAnalyzer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_30DDB06A_4689_41f8_A5FE_1837F52D10EE_KHI: Access was denied because the server has reached the maximum number of connections allowed for the organization. See the event log for more information._30DDB06A_4689_41f8_A5FE_1837F52D10EE_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_310ecf22_a0b9_4cb1_9742_3336f7f72e5c_KHI: The Microsoft Search (Exchange) service (msftesql-Exchange) has restarted more than 5 times within 30 minutes._310ecf22_a0b9_4cb1_9742_3336f7f72e5c_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_314a0e63_83f3_46f8_9209_d89ee66fdf8f_KHI: The Windows Cluster service cannot unload the cluster database. The server may need to be restarted._314a0e63_83f3_46f8_9209_d89ee66fdf8f_Microsoft.Exchange.2010.Mailbox.ClusterServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_31c8b203_89f3_4789_8aa9_9d0f3df2307d_KHI: The Exchange store terminated due to an RPC error._31c8b203_89f3_4789_8aa9_9d0f3df2307d_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_336a6c8f_c9a9_4431_a0ea_11ed53c2be06_KHI: The virus scanner has stopped due to a scanning error._336a6c8f_c9a9_4431_a0ea_11ed53c2be06_Microsoft.Exchange.2010.Mailbox.VirusScanSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_33A0A258_F6E9_45A5_810B_8EDFAB40855B_KHI: System Attendant failed to correctly generate Address List Service information for the task._33A0A258_F6E9_45A5_810B_8EDFAB40855B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_33BD8334_D092_4E35_91E5_8F50275F2F77_KHI: Outlook Web App failed to initialize. A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 25 for the cause._33BD8334_D092_4E35_91E5_8F50275F2F77_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_33D4C5A4_AAAA_11DF_82C5_AACDDFAAAAAB_KHI: The UM Partner Message Assistant failed to process a partner message._33D4C5A4_AAAA_11DF_82C5_AACDDFAAAAAB_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_33D4C5A4_CCCC_11DF_82C5_AACDDFAAAAAA_KHI: The Message Waiting Indicator Assistant failed to process an MWI message._33D4C5A4_CCCC_11DF_82C5_AACDDFAAAAAA_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_342CCE37_314A_452a_A669_8033148748D1_KHI: Get-PerimeterQueueInfo cmdlet failed to retrieve queue data._342CCE37_314A_452a_A669_8033148748D1_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Get_PerimeterQueueInfo_diagnostic_cmdlet_for_FOPE_Inbound_queues.TruePublic
_34365828_76DE_4D11_A0F0_6567C87ADB20_KHI: A database write I/O failure occurred. Review the error code and the System Event log for more information._34365828_76DE_4D11_A0F0_6567C87ADB20_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_344630F0_97D3_46BB_A5AF_65B129189083_KHI: Remote server advertised hash authentication for Exchange, which isn't supported by this server._344630F0_97D3_46BB_A5AF_65B129189083_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_34a2f1e1_d3c3_4b9d_ba22_4721c3241df2_KHI: The Exchange store failed to start because it is out of file handles._34a2f1e1_d3c3_4b9d_ba22_4721c3241df2_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_352c3963_7abe_42c0_9cd8_e6205fd154e1_KHI: One or more networks supporting the database availability group are not operating properly on this server._352c3963_7abe_42c0_9cd8_e6205fd154e1_Microsoft.Exchange.2010.Mailbox.NetworkSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_357A2E92_D617_42f3_8897_2A8944BF32C6_KHI: MSExchangeMailboxAssistants Memory Process_357A2E92_D617_42f3_8897_2A8944BF32C6_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_35894360_F523_4623_88C0_66A69242C91A_KHI: An error occurred while running the Test-MAPIConnectivity diagnostic cmdlet._35894360_F523_4623_88C0_66A69242C91A_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_TruePublic
_35D2D96C_9335_4655_9062_31CE24404CD4_KHI: A Transport database operation has encountered a fatal error. The Transport service is shutting down._35D2D96C_9335_4655_9062_31CE24404CD4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3601AC3D_7181_46F3_9288_18A7EFD0F8B7_KHI: The secondary index of a table is corrupted. Defragment the database offline to rebuild the index._3601AC3D_7181_46F3_9288_18A7EFD0F8B7_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_36E2084D_0CE5_48D9_AC6B_C356AFECDDC1_KHI: Exchange ActiveSync connectivity (Internal) transaction failure - Autodiscovery failure._36E2084D_0CE5_48D9_AC6B_C356AFECDDC1_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_370708C1_0DE7_4B70_8EC7_13A709716D68_KHI: Sender ID agent: DNS isn't configured. Messages will temporarily be handled as if DNS requests have failed._370708C1_0DE7_4B70_8EC7_13A709716D68_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_37BA45AF_061E_4595_8BE0_2EF018354E2A_KHI: The powershell script rolling out alternate service account password for CAS array Kerberos authentication has failed - RollAlternateServiceAccountPassword.ps1_37BA45AF_061E_4595_8BE0_2EF018354E2A_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3899AE0C_84F2_45E1_A8D1_E0A1A4C20353_NonServiceImpacting: Exchange failed to create the log directory. Logs won't be generated until the reason for the failure is corrected._3899AE0C_84F2_45E1_A8D1_E0A1A4C20353_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_38D7F8FC_D9CC_4a45_B46C_8AA45036E04D_KHI: An IMAP4 connectivity transaction failure occurred. The specified user isn't unique._38D7F8FC_D9CC_4a45_B46C_8AA45036E04D_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_38F21856_8ED8_4F3F_8322_D434B17DD752_NonServiceImpacting: At least one file couldn't be processed. These files have been tagged with .bad extensions. Look for .bad files, and verify the content is valid._38F21856_8ED8_4F3F_8322_D434B17DD752_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_39062768_8a67_407a_814f_517db9636dba_KHI: The Microsoft Exchange POP3 service (MSExchangePOP3) isn't running._39062768_8a67_407a_814f_517db9636dba_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_39b3d6e6_489d_45dc_a807_670ed64b10c8_KHI: The database copy is experiencing an unusually high log generation rate (bytes written/second) for a sustained period of at least 15 minutes._39b3d6e6_489d_45dc_a807_670ed64b10c8_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_39cd29e8_711a_4e12_9e17_3fc899a6a09a_KHI: An error has terminated operation of a local database copy. Operation of the local database copy is being restarted._39cd29e8_711a_4e12_9e17_3fc899a6a09a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3a90fd51_603b_40b0_8e8f_0cb49353b20e_KHI: Exchange store: Public Folder Database: Messages Queued for Submission - sustained for 15 minutes - Red (>35)._3a90fd51_603b_40b0_8e8f_0cb49353b20e_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_3A9FBFFA_221F_42cd_A0B4_8F4FFC1AC39B_KHI: The Microsoft Exchange Transport Log Search service was unable to access the registry._3A9FBFFA_221F_42cd_A0B4_8F4FFC1AC39B_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3AA11229_64DD_4f25_B90A_E3019AE59BDE_NonServiceImpacting: The specified correlation time window value is less than the minimum allowed value._3AA11229_64DD_4f25_B90A_E3019AE59BDE_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTruePublic
_3B05FAB7_34D0_4497_91D5_EA2E55D4E7F9_KHI: An error occurred while running the Test-ECPConnectivity (Internal) cmdlet._3B05FAB7_34D0_4497_91D5_EA2E55D4E7F9_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_3b849eee_caac_4514_94e6_446c95ede293_KHI: Transient failure retry threshold reached for change in EHF Admin sync._3b849eee_caac_4514_94e6_446c95ede293_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3B974596_FA2F_4F47_8654_3C13446F5D90_KHI: The log file is damaged and can't be used. If the log file needs to be recovered. Use a backup copy of the log file._3B974596_FA2F_4F47_8654_3C13446F5D90_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3BAB0EB7_DA75_4c0b_8DCB_AC1EFF9EAF16_KHI: Events are not being Processed for a database._3BAB0EB7_DA75_4c0b_8DCB_AC1EFF9EAF16_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_3bada911_af24_48c8_81c0_7bd31d7edd03_KHI: A lost flush on the active copy was detected by a passive database copy._3bada911_af24_48c8_81c0_7bd31d7edd03_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3BF27765_E45F_415c_AEE0_3C18352C8328_KHI: Failed to execute the Test-OutlookWebServices diagnostic cmdlet._3BF27765_E45F_415c_AEE0_3C18352C8328_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.TruePublic
_3c6be1b4_7b18_46b3_b938_1c664daad203_KHI: The average Microsoft Exchange Address Book NSPI directory request is taking longer than the allotted threshold. This is negatively affecting the Outlook experience._3c6be1b4_7b18_46b3_b938_1c664daad203_Microsoft.Exchange.2010.ClientAccessOutlookDirectorySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_3C91595B_CB27_4E09_8F3E_B8C85038527A_KHI: Outlook Web App failed to initialize. A theme ID attribute wasn't found. Review MSExchangeOWA event 24 for the cause._3C91595B_CB27_4E09_8F3E_B8C85038527A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3C9A188E_9788_4f8f_89AD_AA8C2EF23FA8_KHI: Calendar Connectivity (External) transaction failures - Failed to Retrieve ICS file._3C9A188E_9788_4f8f_89AD_AA8C2EF23FA8_Microsoft.Exchange.2010.ClientAccessAnonymousCalendarSharingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_CalendarConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_3D6552DA_2A91_4210_ACFC_0704B1BCDE3F_KHI: Transport IsMemberOfResolver ResolvedGroups Cache nearing capacity - Yellow(>66)._3D6552DA_2A91_4210_ACFC_0704B1BCDE3F_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_3DAE468F_AE2F_4090_A435_96B7ACB23778_KHI: A secure connection to a domain-secured domain couldn't be established because validation of the TLS certificate failed._3DAE468F_AE2F_4090_A435_96B7ACB23778_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3dc23ab6_58f8_4c76_a32c_fac83fe72ff2_KHI: Test-ReplicationHealth was unable to contact the log copier listener._3dc23ab6_58f8_4c76_a32c_fac83fe72ff2_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3e078288_bb7c_495c_8808_8af40ce15274_KHI: The Exchange store has terminated._3e078288_bb7c_495c_8808_8af40ce15274_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3E1D5C22_4DBE_470f_A3F7_FE3FAD610D35_KHI: The local database copy was unexpectedly dismounted._3E1D5C22_4DBE_470f_A3F7_FE3FAD610D35_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3E5F80C5_ABFD_422c_832B_8AC1781B9F3A_KHI: Too many failed message tracking requests via task - Red (>5\%) -_3E5F80C5_ABFD_422c_832B_8AC1781B9F3A_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_3E71B1FB_5563_4770_988C_A47B583413EA_KHI: MSExchange OWA: Storage Transient Exception Failure Percentage Red>10_3E71B1FB_5563_4770_988C_A47B583413EA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_3f05ea1c_6937_472f_8d7b_06055174fdcd_KHI: A storage performance problem is affecting the database copy. Client performance may be affected._3f05ea1c_6937_472f_8d7b_06055174fdcd_Microsoft.Exchange.2010.Mailbox.DatabaseCopyIntegritySuppressionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_3F062C11_E57B_4e77_8F43_D75C24AF7E52_KHI: MSExchangeTransport found a critical storage error and has stopped because of insufficient permission to update registry._3F062C11_E57B_4e77_8F43_D75C24AF7E52_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3FAFE99E_9776_48AB_804B_ADC53E1245F4_KHI: The Transport database log file path is invalid. The Microsoft Exchange Transport service is shutting down._3FAFE99E_9776_48AB_804B_ADC53E1245F4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_3FE64847_AA4E_46C4_9AF1_4E8EED57625B_KHI: An internal server error occurred in the Exchange Web Services component._3FE64847_AA4E_46C4_9AF1_4E8EED57625B_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_405F269F_96F8_4836_9EE0_C92E9DE95C29_KHI: Could not search under a given entry in the directory. Cannot access Address List information._405F269F_96F8_4836_9EE0_C92E9DE95C29_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_408F80C5_53B1_4126_B5FC_8FB745E6120E_KHI: Unable to run the Test-Mailflow diagnostic cmdlet to verify cross-premises mail flow._408F80C5_53B1_4126_B5FC_8FB745E6120E_Microsoft.Exchange.2010.Mailbox.CrossPremisesMailflowMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_Mailflow_CrossPremises_diagnostic_cmdlet.TruePublic
_40963FC2_6525_4F9A_AA2E_6CCB9E1402F9_KHI: Connection Filter agent: DNS isn't configured. The IP Allow List and Block List providers will be skipped._40963FC2_6525_4F9A_AA2E_6CCB9E1402F9_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_40BF4896_7F30_4b30_8B91_2E49D79DF422_KHI: Transport availability impacted - Number of messages rejected because local loop count threshold exceeded - Red(>10)._40BF4896_7F30_4b30_8B91_2E49D79DF422_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_41051272_A01B_495e_8484_3E70C3BDF3E8_KHI: Transport availability impacted - Number of messages rejected because local loop count threshold exceeded - Red(>10)._41051272_A01B_495e_8484_3E70C3BDF3E8_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_41079587_CD8C_4816_812C_77CEBF392D65_KHI: IMAP4 connectivity transaction failure - The Client Access server was not found._41079587_CD8C_4816_812C_77CEBF392D65_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_4177B349_28AB_4461_8DF8_C9FEBB1B040A_NonServiceImpacting: Exchange failed to write the logs because of an error. The source component and cause of the error are specified in the event description._4177B349_28AB_4461_8DF8_C9FEBB1B040A_Microsoft.Exchange.2010.CommonAllServerRolesMicrosoft.Exchange.2010.CommonAllServerRoles.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_41C76A56_BC5D_4037_8C71_DAC466E184EB_KHI: Netlogon service average semaphore hold time - sustained for 10 minutes - Red(>30)._41C76A56_BC5D_4037_8C71_DAC466E184EB_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_4293FD6B_30CE_46e5_B082_0A1CF65E4D94_KHI: An error on the target server blocked replication of a database copy._4293FD6B_30CE_46e5_B082_0A1CF65E4D94_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_4305580F_A675_4225_8DB8_C48586477365_Forensic: ExBPA Warning._4305580F_A675_4225_8DB8_C48586477365_Microsoft.Exchange.2010.CommonBestPracticeAnalyzerMicrosoft.Exchange.2010.CommonBestPracticeAnalyzer.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_4343597F_1F09_46a4_8E8F_DED6DCF26A60_KHI: Database copy encountered serious I/O error. If this was the active copy, failover was successful. Copy set to FailedAndSuspended_4343597F_1F09_46a4_8E8F_DED6DCF26A60_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_4372C938_F198_43FD_AB3D_9C1729347D30_KHI: The MSExchangeAL service logged an out of memory exception._4372C938_F198_43FD_AB3D_9C1729347D30_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_43A05F7E_F7D5_4379_9EFC_9299DFEC4A61_KHI: Failed to run the Test-ExchangeSearch diagnostic cmdlet._43A05F7E_F7D5_4379_9EFC_9299DFEC4A61_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ExchangeSearch_cmdlet.TruePublic
_43FAC9E7_0930_492C_BAFB_4C8D41E2237E_KHI: An error occurred while running the Test-ActiveSyncConnectivity (Internal) cmdlet._43FAC9E7_0930_492C_BAFB_4C8D41E2237E_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_4477BD00_EBF0_4CBD_9696_A0831CAF877F_NonServiceImpacting: Can't delete files from Pickup directory. Verify Network Service account has Delete Subfolders and Files permission for the directory._4477BD00_EBF0_4CBD_9696_A0831CAF877F_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_44E9A997_6A02_4298_8430_8E01952AB6F3_KHI: MSExchange OWA: IM - Sign-In Failure Percentage Yellow>10_44E9A997_6A02_4298_8430_8E01952AB6F3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_4505324C_4DF5_4830_85B1_611107772E2A_KHI: A POP3 connectivity transaction failure occurred. The Client Access server isn't enabled for RPC._4505324C_4DF5_4830_85B1_611107772E2A_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_45CBC307_03C8_44E3_B504_79D338F98F6D_KHI: Exchange Control Panel connectivity (External) transaction failures._45CBC307_03C8_44E3_B504_79D338F98F6D_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_45e93ff8_96b7_49c1_ac41_24ffbeca65d4_KHI: An I/O error that may be repaired by a single page restore has affected the database copy on the local server._45e93ff8_96b7_49c1_ac41_24ffbeca65d4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_48003315_F73A_4F6B_8108_A1A6F7C34432_KHI: The Test-UMConnectivity (Local Voice) cmdlet failed to run._48003315_F73A_4F6B_8108_A1A6F7C34432_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_483A04E9_66F9_442f_802F_A2E18D0EE227_KHI: Database copy is "failed and suspended"; it is not keeping up with the changes on the active database copy._483A04E9_66F9_442f_802F_A2E18D0EE227_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_4845AC4D_0366_4335_B086_534446553804_KHI: High LDAP Search Time detected. Sustained for 2 minutes - Yellow(>100 milliseconds)._4845AC4D_0366_4335_B086_534446553804_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_484E9D6E_C7C0_45dc_8772_76B9BD2F2CB2_KHI: Unreachable queue length - sustained for 60 minutes - Red(>1) - Hub Transport._484E9D6E_C7C0_45dc_8772_76B9BD2F2CB2_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_48662ddd_1ae4_4716_8375_53b00b22bed2_KHI: The Exchange store was unable to load the virus scanner._48662ddd_1ae4_4716_8375_53b00b22bed2_Microsoft.Exchange.2010.Mailbox.VirusScanSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_48865281_E001_4386_A5AA_155449BDAE73_KHI: The database copy is critically low on database volume space. The volume has reached critical levels (8\% free)._48865281_E001_4386_A5AA_155449BDAE73_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_489e8fc9_5528_4dd3_9daf_a59e790ab6c7_KHI: Error occurred while executing the Test-ReplicationHealth diagnostic cmdlet._489e8fc9_5528_4dd3_9daf_a59e790ab6c7_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ReplicationHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_48d6aed7_7814_45b4_bfec_078342da0d60_KHI: The virus scanner has stopped._48d6aed7_7814_45b4_bfec_078342da0d60_Microsoft.Exchange.2010.Mailbox.VirusScanSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_48E09538_BE62_414C_9DFA_23ABA0C456E4_KHI: There's an error in your Outlook Web App configuration. A character in a file extension isn't valid._48E09538_BE62_414C_9DFA_23ABA0C456E4_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_492e65ec_db1b_44b3_a353_7efa9111eb5a_KHI: The database copy experienced a failure that can't be corrected. Recovery was unsuccessful. The database might be dismounted._492e65ec_db1b_44b3_a353_7efa9111eb5a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_495d9853_77bd_4ccb_87f6_55944f7cf41a_KHI: Mail submission is not keeping up with the work being presented by the changes to the locally mounted databases._495d9853_77bd_4ccb_87f6_55944f7cf41a_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_49F9F645_068D_4E4B_A2F3_05CF2495FB9A_KHI: The Content Filter agent couldn't be initialized._49F9F645_068D_4E4B_A2F3_05CF2495FB9A_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4A1E55BD_96B7_4233_800F_C03039163DE3_KHI: The Win32 API call returned an error. The service could not be initialized._4A1E55BD_96B7_4233_800F_C03039163DE3_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4a5c2561_3196_444a_9f79_042e1bded0bf_KHI: The database copy is experiencing high directory access latency._4a5c2561_3196_444a_9f79_042e1bded0bf_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_4B251AFE_1B77_4e7d_B16A_36CD703A60D0_KHI: The Exchange Transport service was unable to listen on the Receive connector because a 'Socket Access Denied' error was encountered._4B251AFE_1B77_4e7d_B16A_36CD703A60D0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4B3C9937_ACF4_401c_A6A8_BDB8D09D36CB_KHI: A POP3 connectivity transaction failure occurred. There is no Exchange virtual server on the server that was specified by the user._4B3C9937_ACF4_401c_A6A8_BDB8D09D36CB_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_4c17b04a_39a3_476a_b93d_929c4c99feb6_KHI: An error occurred while running the Test-MAPIConnectivity cmdlet._4c17b04a_39a3_476a_b93d_929c4c99feb6_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_TruePublic
_4CF3A45F_4007_4c06_974B_F5BCF33AAFDA_KHI: Transport latency impacted - percent messages completing categorization over last 5 min - Red(<1)._4CF3A45F_4007_4c06_974B_F5BCF33AAFDA_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_4d469aa9_5aee_4cf8_8bb5_f222edba0b40_KHI: EDiscovery Mailbox wasn't found. This is essential for many features in Unified Messaging._4d469aa9_5aee_4cf8_8bb5_f222edba0b40_Microsoft.Exchange.2010.UnifiedMessagingServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4d4972b4_1606_45c0_b01a_8a489f474864_KHI: The Exchange store has terminated due to an out-of-memory error._4d4972b4_1606_45c0_b01a_8a489f474864_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4DF8B498_7AC8_4889_9F17_E5B35EB9B926_KHI: Unable to read the log file header. Cause can be a mismatched log file signature or a corrupted log file or log header._4DF8B498_7AC8_4889_9F17_E5B35EB9B926_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4E77581D_0ABD_4DE4_ACB0_882E911B617A_KHI: The database file doesn't match the log files. The Microsoft Exchange Transport service is shutting down._4E77581D_0ABD_4DE4_ACB0_882E911B617A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_4F028C01_AFBF_4093_A4DE_C1081FB53C02_KHI: Outlook Web App connectivity (Internal) transaction failures._4F028C01_AFBF_4093_A4DE_C1081FB53C02_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_4F111220_496A_460a_90D9_420E5EA9121F_KHI: MSExchange OWA: Mailbox Offline Exception Percentage Yellow>5_4F111220_496A_460a_90D9_420E5EA9121F_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_4f111637_aab8_4ba3_a130_aaabb403650c_KHI: EdgeSync MSERV synchronization critical failures._4f111637_aab8_4ba3_a130_aaabb403650c_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C00_KHI: HTTP Connectivity with Autodiscover - RPC over HTTP failure (RpcProxy)_4F129C11_AFBF_4093_A4DE_C1081FB53C00_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C01_KHI: HTTP Connectivity with Autodiscover - Address Book failure (NSPI)_4F129C11_AFBF_4093_A4DE_C1081FB53C01_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C03_KHI: HTTP Connectivity with Autodiscover - Address Book failure (ABREF)_4F129C11_AFBF_4093_A4DE_C1081FB53C03_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C05_KHI: HTTP Connectivity with Autodiscover - Autodiscover failure_4F129C11_AFBF_4093_A4DE_C1081FB53C05_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C07_KHI: HTTP Connectivity with Autodiscover - RPC Client Access failure (Connect)_4F129C11_AFBF_4093_A4DE_C1081FB53C07_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C09_KHI: HTTP Connectivity with Autodiscover - RPC Client Access failure (Logon)_4F129C11_AFBF_4093_A4DE_C1081FB53C09_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53C0A_KHI: HTTP Connectivity with Autodiscover - Unexpected Exception_4F129C11_AFBF_4093_A4DE_C1081FB53C0A_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E01_KHI: TCP Connectivity with Autodiscover - Address Book failure (NSPI)_4F129C11_AFBF_4093_A4DE_C1081FB53E01_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E03_KHI: TCP Connectivity with Autodiscover - Address Book failure (ABREF)_4F129C11_AFBF_4093_A4DE_C1081FB53E03_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E05_KHI: TCP Connectivity with Autodiscover - Autodiscover failure_4F129C11_AFBF_4093_A4DE_C1081FB53E05_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E07_KHI: TCP Connectivity with Autodiscover - RPC Client Access failure (Connect)_4F129C11_AFBF_4093_A4DE_C1081FB53E07_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E09_KHI: TCP Connectivity with Autodiscover - RPC Client Access failure (Logon)_4F129C11_AFBF_4093_A4DE_C1081FB53E09_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4F129C11_AFBF_4093_A4DE_C1081FB53E0A_KHI: TCP Connectivity with Autodiscover - Unexpected Exception_4F129C11_AFBF_4093_A4DE_C1081FB53E0A_Microsoft.Exchange.2010.ClientAccessOutlookSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_AutoDiscover_TruePublic
_4FBDF2BC_F185_43b1_9040_1D7ECC4C4123_KHI: An Exchange certificate has expired or will expire very soon. Immediate action is required._4FBDF2BC_F185_43b1_9040_1D7ECC4C4123_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_50562A9C_C9FD_4d16_A8F7_3694051E4FB9_KHI: MSExchange OWA: Failed Requests/s Yellow>5_50562A9C_C9FD_4d16_A8F7_3694051E4FB9_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_5158F906_9C5D_4384_972C_FBBA2C67494B_KHI: Could not read a registry key because the value is not a DWORD._5158F906_9C5D_4384_972C_FBBA2C67494B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_519D0B8E_0D8F_479d_B83F_630A7DB86FBF_NonServiceImpacting: The correlation interval value specified is less than the minimum allowed value._519D0B8E_0D8F_479d_B83F_630A7DB86FBF_Microsoft.Exchange.2010.MonitoringCorrelationEngineMicrosoft.Exchange.2010.MonitoringCorrelationEngine.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.RepeatedEventsLogManualReset2StateMonitorTypeTruePublic
_5248a119_d598_44d3_b61f_47d98c66d81d_KHI: The Microsoft Exchange Transport Log Search service (MSExchangeTransportLogSearch) isn't running._5248a119_d598_44d3_b61f_47d98c66d81d_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_526D6697_1991_4EDF_81EB_9E3D7C1562FB_KHI: LDAP Searches Time Limit Exceeded per minute - sustained for 2 minutes - Yellow(>20)._526D6697_1991_4EDF_81EB_9E3D7C1562FB_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_52A8E7E0_FD6F_40d0_89CD_14300C115FE0_KHI: Transport Protection Rule failed to apply policy due to permanent error_52A8E7E0_FD6F_40d0_89CD_14300C115FE0_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5325C293_7F2A_47E9_93E1_D7A9E797D8F8_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 9 for the cause._5325C293_7F2A_47E9_93E1_D7A9E797D8F8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_532FE988_BEE8_4B1B_AFDA_78E942401A50_KHI: Outlook Web App failed to initialize. A required forms registry folder doesn't exist. For more information, review MSExchangeOWA event 3._532FE988_BEE8_4B1B_AFDA_78E942401A50_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_540CC48A_9805_4BFF_B107_0EB79264F47C_KHI: Outlook Web App failed to retrieve the Active Directory system configuration session._540CC48A_9805_4BFF_B107_0EB79264F47C_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_548DD1CE_0062_49b7_B26F_8EC44B5632AE_KHI: Delivery Failure Delivery-StoreDriver 5.6.0 happened over last 5 minutes - Yellow(>5)._548DD1CE_0062_49b7_B26F_8EC44B5632AE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_54968805_39FB_4da3_8EC0_FB0C64642014_KHI: The IRM transaction failed to run with exception_54968805_39FB_4da3_8EC0_FB0C64642014_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_54AE69F8_4AE6_4a24_BB57_F6509C55AA9A_KHI: The configuration object was reloaded multiple times. Transport may not receive Active Directory notifications. This alert can be addressed during business hours._54AE69F8_4AE6_4a24_BB57_F6509C55AA9A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_54ba6691_179e_4f9f_b382_9c18fa2952f8_KHI: The Microsoft Exchange Mailbox Replication Service (MSExchangeMailboxReplication) isn't running._54ba6691_179e_4f9f_b382_9c18fa2952f8_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_55449D43_58CC_48a9_8D9A_4DE0D01FDF6D_KHI: MSExchange OWA: IM - Sent Message Delivery Failure Percentage Yellow>10_55449D43_58CC_48a9_8D9A_4DE0D01FDF6D_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_55455678_b916_4634_85ea_6838119c0bb2_KHI: Corrupted log files exist on a database copy outside the database's required log range. Recovery was unsuccessful._55455678_b916_4634_85ea_6838119c0bb2_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5555618F_B0E5_4ebb_845D_32BDE9CD45AE_KHI: High percentage of transport submissions denied due to Throttling Service Client - sustained for 30 minutes - Red(>10)_5555618F_B0E5_4ebb_845D_32BDE9CD45AE_Microsoft.Exchange.2010.CommonTransportThrottlingClientSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_5634EDAB_8830_4847_98FF_13395FBA7729_KHI: The WebReady Document Viewing manager wasn't able to access the temporary folder._5634EDAB_8830_4847_98FF_13395FBA7729_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_56E55046_0CE9_11DB_9607_00E08161165F_KHI: Exchange was unable to execute the diagnostic cmdlet to probe the IMAP4 connectivity state._56E55046_0CE9_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_5781158F_604A_4936_8004_0FEB3E99BFEF_KHI: Failed to execute the Test-OWAConnectivity (Internal) diagnostic cmdlet._5781158F_604A_4936_8004_0FEB3E99BFEF_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_57B6F34B_C97C_414D_ACC5_05B91C4A8680_KHI: The Autodiscover service encountered an installation error._57B6F34B_C97C_414D_ACC5_05B91C4A8680_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_57D7E0E1_69C0_4ECD_8D2D_7C597492E19A_KHI: The designated file isn't a database file. The headers of the file may be corrupted. You may need to restore from backup._57D7E0E1_69C0_4ECD_8D2D_7C597492E19A_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_58369667_982F_4ec0_8702_A663C53C5BEF_KHI: Number of items in retry table has been more than 30000 for 30 minutes._58369667_982F_4ec0_8702_A663C53C5BEF_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_586EC960_8281_402F_AFF4_FA9ED992B108_KHI: DSAccess failed to provide a domain controller to use to read configuration. Proxy address calculation services will not be available._586EC960_8281_402F_AFF4_FA9ED992B108_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_58AEC5AA_0187_4bc1_A782_F7D1BB425922_KHI: POP3 connectivity transaction failures._58AEC5AA_0187_4bc1_A782_F7D1BB425922_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_5A27551C_1C7C_47c1_9165_020CB0CB9BE4_KHI: The Microsoft Exchange Unified Messaging service wasn't able to encrypt or decrypt a voice message._5A27551C_1C7C_47c1_9165_020CB0CB9BE4_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.ProtectedVoiceMessageSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5A2A1413_D9B5_48dd_AB94_23D8B2BB98FD_KHI: Database copy encountered a serious I/O error. Automatic repair failed. The copy will be dismounted or marked as FailedAndSuspended._5A2A1413_D9B5_48dd_AB94_23D8B2BB98FD_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5A4F5CE4_EA40_4C4F_9CC2_9AF86EE6C32B_KHI: There is a gap in sequence number between log files. This is because log files are deleted. Restore log files from backup._5A4F5CE4_EA40_4C4F_9CC2_9AF86EE6C32B_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5a5f19f0_6ef2_4256_a30d_cd0d12326765_KHI: At startup, the Microsoft Exchange Replication service isn't fully initialized. The log copier listener didn't start._5a5f19f0_6ef2_4256_a30d_cd0d12326765_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5A953DF5_7C29_4547_8FE6_22ECE828F823_KHI: MSExchange OWA: Storage Permanent Exception Failure Percentage Red>10_5A953DF5_7C29_4547_8FE6_22ECE828F823_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_5AB186A8_551E_4068_8224_9532EE781577_KHI: The Transport Layer Security (TLS) Certificate for the specified partner domain couldn't be validated._5AB186A8_551E_4068_8224_9532EE781577_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5B6E7C1A_AD46_4984_953B_7765E361D0EC_KHI: The local database copy experienced an index corruption. Please reseed the catalog by using the Update-MailboxDatabaseCopy cmdlet with the -CatalogOnly parameter._5B6E7C1A_AD46_4984_953B_7765E361D0EC_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_5C08CA7E_D83A_4c50_BB80_213345788B67_Forensic: MSExchangePop3: Permanent Active Directory Errors Rate Red>10 per min_5C08CA7E_D83A_4c50_BB80_213345788B67_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_5c13c964_19a5_4b82_8abc_381637445d44_KHI: The Client Access server wasn't able to contact a Unified Messaging server for a Play On Phone request._5c13c964_19a5_4b82_8abc_381637445d44_Microsoft.Exchange.2010.ClientAccessUnifiedMessagingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5c1c7dd4_89a1_4ba4_be25_91d295735fc3_KHI: The database copy is low on database volume space and continues to grow. The volume is under 25\% free._5c1c7dd4_89a1_4ba4_be25_91d295735fc3_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5C46F87F_17BB_4dec_8B2F_2FD232E1A5A5_KHI: The Exchange Transport service was unable to start listening on the Receive connector binding because the address is already in use._5C46F87F_17BB_4dec_8B2F_2FD232E1A5A5_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5DB2712E_607A_450E_9695_083B7109E930_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 5 for the cause._5DB2712E_607A_450E_9695_083B7109E930_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5DB3E164_8022_4441_B679_BBBF07148AF4_KHI: An Exchange certificate will expire soon._5DB3E164_8022_4441_B679_BBBF07148AF4_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5dc9bd73_e90d_4a8d_9dcc_548e9255eb96_KHI: EdgeSync EHF synchronization failures._5dc9bd73_e90d_4a8d_9dcc_548e9255eb96_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_TruePublic
_5DE75C0D_427C_4232_BA65_A2762A31C7B4_KHI: Scom agent failed to send perf data to SCOM. Issues may be occurring that are not being properly reported._5DE75C0D_427C_4232_BA65_A2762A31C7B4_Microsoft.Exchange.2010.CommonAllServerRolesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5e6ba7c6_9e73_43a8_adc7_6aee94ab73e5_KHI: EdgeSync EHF synchronization not configured._5e6ba7c6_9e73_43a8_adc7_6aee94ab73e5_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_TruePublic
_5F13B7DF_B3E6_423C_AB7E_EA44343A73DC_KHI: A torn-write was detected during hard recovery. This log file is damaged and is unusable. Restore the log files from a backup copy._5F13B7DF_B3E6_423C_AB7E_EA44343A73DC_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_5FC3F021_BCD1_4b72_845C_299FA1705C17_KHI: Troubleshoot-CI.ps1 encountered an unexpected error._5FC3F021_BCD1_4b72_845C_299FA1705C17_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_5fe97218_652e_44df_9223_37b1668033aa_KHI: The database copy is experiencing high latency._5fe97218_652e_44df_9223_37b1668033aa_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_60AEC99E_F9FD_42f9_AEA1_28036CE6FB60_KHI: Active Directory is reaching its capacity to hold Exchange Active Sync device classes._60AEC99E_F9FD_42f9_AEA1_28036CE6FB60_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_619F5D48_D7AE_4846_A1FD_F5DDC98F3EC6_KHI: Database dismounted or service degraded._619F5D48_D7AE_4846_A1FD_F5DDC98F3EC6_Microsoft.Exchange.2010.Mailbox.DatabaseServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_TestGenericRollupHealth_diagnostic_script_for_DatabaseServiceContainsDatabaseCopyMounted.TruePublic
_61B1F887_50BA_4592_A904_C47C94C04612_Forensic: The database copy is not searchable on the local server. Another database copy may be searchable if it is mounted on a different server._61B1F887_50BA_4592_A904_C47C94C04612_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableMicrosoft.Exchange.2010.Mailbox.DatabaseCopySearchable.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_61c1da8f_99a0_4c9f_8620_0e1e1beeeee1_KHI: Partner Voice Message Transcription failures \% over the last 1 hour - Red (> 10)_61c1da8f_99a0_4c9f_8620_0e1e1beeeee1_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PartnerTranscriptionFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_61C5448E_6F6A_4533_AA06_BFF13BAD198F_KHI: An IMAP4 connectivity transaction failure occurred. The NetworkCredential value for the given MailboxCredential is set to null._61C5448E_6F6A_4533_AA06_BFF13BAD198F_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_6331da8f_99a0_4c9f_8620_0e1e1bfffff1_KHI: Partner Voice Message Transcription failures \% over the last 1 hour - Yellow (> 5)._6331da8f_99a0_4c9f_8620_0e1e1bfffff1_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PartnerTranscriptionFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_63353018_17FC_404c_8F20_CD3909374E74_NonServiceImpacting: High number of LDAP search failures detected. Check the Application event log for more information._63353018_17FC_404c_8F20_CD3909374E74_Microsoft.Exchange.2010.CommonDomainControllerMicrosoft.Exchange.2010.CommonDomainController.NonServiceImpactingMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_637d0c52_8127_4597_a3bd_05d85e7549fc_KHI: There is a configuration problem on a database copy, or a file or directory is missing due to a storage failure. The attempted failover was unsuccessful._637d0c52_8127_4597_a3bd_05d85e7549fc_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_63c1da8f_99a0_4c9f_8620_0e1e1ae2e441_KHI: \% of Messages Successfully Processed Over the Last Hour - Red (< 90)_63c1da8f_99a0_4c9f_8620_0e1e1ae2e441_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PipelineSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_63c1da8f_99a0_4c9f_8620_0e1e1aeeeee1_KHI: Mailbox connection failures \% over the last 1 hour - Red (> 10)_63c1da8f_99a0_4c9f_8620_0e1e1aeeeee1_Microsoft.Exchange.2010.UnifiedMessaging.GeneralSensor.MailboxFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_63c1da8f_99a0_4c9f_8620_0e1e1afffff1_KHI: Mailbox connection failures \% over the last 1 hour - Yellow (> 5)._63c1da8f_99a0_4c9f_8620_0e1e1afffff1_Microsoft.Exchange.2010.UnifiedMessaging.GeneralSensor.MailboxFailuresSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_64071F87_FF3D_49ec_85FB_92B9B1D6BDE9_KHI: A POP3 connectivity transaction failure occurred. The specified user isn't unique._64071F87_FF3D_49ec_85FB_92B9B1D6BDE9_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_646B72BA_9696_4A68_BFCA_FD3D44449DC4_KHI: The Test-OutlookConnectivity (Internal) cmdlet failed to run._646B72BA_9696_4A68_BFCA_FD3D44449DC4_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_647EB50A_B70B_4E60_94E1_2189B97A30DF_KHI: The Send connector requires Transport Layer Security before the MailFrom command but the server can't establish TLS._647EB50A_B70B_4E60_94E1_2189B97A30DF_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_653D3B31_DFAE_45c8_A656_2584E4C7B93E_KHI: The database copy is low on database volume space. The volume has reached error levels (16\% free)._653D3B31_DFAE_45c8_A656_2584E4C7B93E_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_654864B7_3DE0_4cb2_98A8_DBB5499EAA89_Forensic: A database copy's incremental reseed files failed to removed._654864B7_3DE0_4cb2_98A8_DBB5499EAA89_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_656C2B58_53AC_4E35_A04E_0122DECCFAF5_KHI: Could not find an accessible writable domain controller for the domain._656C2B58_53AC_4E35_A04E_0122DECCFAF5_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_656e4225_89a2_4b34_b008_621ead0bc777_KHI: A database is approaching its size limit. Exceeding the limit may result in the database becoming unavailable._656e4225_89a2_4b34_b008_621ead0bc777_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_657bac24_5d21_4cc1_9ebb_52c724724b9d_KHI: The Windows Cluster service is not running._657bac24_5d21_4cc1_9ebb_52c724724b9d_Microsoft.Exchange.2010.Mailbox.ClusterServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_66031D0A_EC28_49bb_9CAE_6A6E22CF0F1A_KHI: An error occurred while running the Test-Mailflow diagnostic cmdlet to verify cross-premises mail flow._66031D0A_EC28_49bb_9CAE_6A6E22CF0F1A_Microsoft.Exchange.2010.Mailbox.CrossPremisesMailflowMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_Mailflow_CrossPremises_diagnostic_cmdlet.TruePublic
_6622af44_b86e_42dd_997b_6c30913c75c8_KHI: \% of Messages Successfully Processed Over the Last Hour - Yellow (< 95)_6622af44_b86e_42dd_997b_6c30913c75c8_Microsoft.Exchange.2010.UnifiedMessaging.SubComponent.PipelineSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_6637f95b_8681_4ce3_976d_70a7c746e83e_KHI: The Microsoft Exchange Unified Messaging service (MSExchangeUM) isn't running._6637f95b_8681_4ce3_976d_70a7c746e83e_Microsoft.Exchange.2010.UnifiedMessagingServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_66380e9d_48b7_451e_bec6_0cbc300af870_KHI: The database copy is low on database volume space and continues to grow. The volume has reached critical levels 8\% free._66380e9d_48b7_451e_bec6_0cbc300af870_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_66CCCAD2_7015_4BD5_9666_87CB63DB1DB7_KHI: An error occurred while running the Test-OWAConnectivity (External) cmdlet._66CCCAD2_7015_4BD5_9666_87CB63DB1DB7_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_6739e186_0cdd_4f2d_a805_1dcd0b90a18d_KHI: The database copy has been falling behind the active copy for 30 minutes_6739e186_0cdd_4f2d_a805_1dcd0b90a18d_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplicationSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_673AB108_EB67_4be8_9063_8FF0CB74D02E_KHI: HTTP Service Request Queues: RejectionRate Yellow>5_673AB108_EB67_4be8_9063_8FF0CB74D02E_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_683C9285_36CB_4147_92F3_3F37A8EF9211_Forensic: Database copy encountered a serious I/O error (active lost flush) that may have affected all copies of the database._683C9285_36CB_4147_92F3_3F37A8EF9211_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_68CC2444_F30D_42DB_A1E2_1BFC407252D7_KHI: Topology discovery failed due to a LDAP error. Check the Event log for more details._68CC2444_F30D_42DB_A1E2_1BFC407252D7_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_695e51b2_821e_478d_8ea1_d11c0c4a27b6_KHI: At startup, the Microsoft Exchange Replication service cannot enable the Active Manager RPC listener._695e51b2_821e_478d_8ea1_d11c0c4a27b6_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_699393fb_2e93_4b10_b2a5_2fec8f3323aa_KHI: The Microsoft Exchange EdgeSync service (MSExchangeEdgeSync) isn't running._699393fb_2e93_4b10_b2a5_2fec8f3323aa_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_69ADDBDA_EF22_4223_B9A1_0315E09C49D6_KHI: The Autodiscover request failed to complete using external host names._69ADDBDA_EF22_4223_B9A1_0315E09C49D6_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.TruePublic
_6B574FFD_52B0_4C4A_97CF_E5EBCB003FEB_KHI: An error occurred during backup of an Exchange store database._6B574FFD_52B0_4C4A_97CF_E5EBCB003FEB_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_6bfca569_c29d_47bb_8870_b6afc1787a2d_Forensic: Mail submission service did not successfully initialize._6bfca569_c29d_47bb_8870_b6afc1787a2d_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_6cb2df1a_c5ed_42bc_955e_4439868ea1ab_KHI: The Microsoft Exchange Replication service appears to be leaking operating system handles._6cb2df1a_c5ed_42bc_955e_4439868ea1ab_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_6CD28ECF_EC1A_4D8E_9A32_4E583C7D6FA7_KHI: The database was partially detached because of an error in updating database headers. Review System log for hardware errors._6CD28ECF_EC1A_4D8E_9A32_4E583C7D6FA7_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_6D095290_B8D4_430E_A8CC_4A5AA09EC28C_KHI: MSExchangeFDS:OAB: Download Task Queued - sustained for 10 hours - Red (>1)._6D095290_B8D4_430E_A8CC_4A5AA09EC28C_Microsoft.Exchange.2010.ClientAccessFileDistributionServiceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_6D86D7CE_1D22_4243_A8FB_294B8395AB91_KHI: The Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) failed to be started._6D86D7CE_1D22_4243_A8FB_294B8395AB91_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_6E5BCFCE_4C25_4E61_A49D_9FEAEAB43192_KHI: Process was terminated because the database engine failed with an error while trying to log the commit of a transaction._6E5BCFCE_4C25_4E61_A49D_9FEAEAB43192_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_6EB7643F_6A2F_4D31_B751_8AB49D1C1733_KHI: There's an error in your Outlook Web App configuration. The configuration for a virtual directory couldn't be found._6EB7643F_6A2F_4D31_B751_8AB49D1C1733_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_6EC31438_9763_4aa3_B622_6860400F8F32_KHI: An IMAP4 connectivity transaction failure occurred. The Exchange Information Store service isn't running._6EC31438_9763_4aa3_B622_6860400F8F32_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_6F57F521_44B8_49f1_B18F_71F2807389EE_KHI: MSExchange OWA: Connection Failed Transient Exception Percentage Yellow>5_6F57F521_44B8_49f1_B18F_71F2807389EE_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_6FCF8893_EF51_4E3B_9E3F_07569F13E7C1_KHI: Percentage catalog size greater than the set threshold_6FCF8893_EF51_4E3B_9E3F_07569F13E7C1_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_705A7A7D_A2EC_4f10_8356_4759281BC316_KHI: Largest Delivery Queue Length - sustained for 30 minutes - Red(>250) - Hub Transport._705A7A7D_A2EC_4f10_8356_4759281BC316_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_70e71218_af11_40cc_88fd_63e95222cafa_KHI: The Microsoft Exchange Forms-Based Authentication service (MSExchangeFBA) isn't running._70e71218_af11_40cc_88fd_63e95222cafa_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_71b8b5cf_56e5_4e59_895a_ead6492a11e7_KHI: The local database copy has more user load than it can support. Users need to be moved to a different database and/or server._71b8b5cf_56e5_4e59_895a_ead6492a11e7_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_722DC53B_79FB_4027_9A36_3D76E2810001_KHI: A POP3 connectivity transaction failure occurred. The mailbox database isn't unique._722DC53B_79FB_4027_9A36_3D76E2810001_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_723B607E_2491_49e7_A991_B6A2B7AEE2EC_Forensic: MSExchangePop3: Average LDAP Latency Red>1000ms_723B607E_2491_49e7_A991_B6A2B7AEE2EC_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_72c056a8_b133_4276_a218_91fac9279d10_KHI: The Exchange store has detected a server-level RPC request time-out._72c056a8_b133_4276_a218_91fac9279d10_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_731EC0DC_74B1_4422_821C_142B7B0451EE_KHI: The primary index of a table is corrupted. Perform an offline defragmentation of the database to rebuild the index._731EC0DC_74B1_4422_821C_142B7B0451EE_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7353AAD3_B834_4773_AA69_31044E38AEE4_KHI: The Test-CalendarConnectivity cmdlet failed to run in external mode._7353AAD3_B834_4773_AA69_31044E38AEE4_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_CalendarConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_743131E4_11B7_43f5_A26B_8D4CC53BE99E_KHI: The Exchange store database: RPC Averaged Latency - sustained for 5 minutes - Red (>70 msec)._743131E4_11B7_43f5_A26B_8D4CC53BE99E_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_743e99e4_f494_4e2e_877c_b43d3a5784e6_KHI: The database copy must be reseeded due to an error in the database copy. The database copy status is failed and suspended._743e99e4_f494_4e2e_877c_b43d3a5784e6_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_74507768_d9d8_4b18_9fb7_5a5705726dd0_KHI: The Exchange information store has used 90\% of available connections._74507768_d9d8_4b18_9fb7_5a5705726dd0_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_749e0eac_ebb2_41e3_8fa2_4a03a1bd3571_KHI: Failed to execute Troubleshoot-DatabaseSpace.ps1._749e0eac_ebb2_41e3_8fa2_4a03a1bd3571_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Troubleshoot_DatabaseSpace_diagnostic_script.TruePublic
_752C72C3_7A6E_49DC_8120_F5AFF115D2BF_KHI: Exchange is unable to start the Microsoft Exchange Anti-spam Update Service._752C72C3_7A6E_49DC_8120_F5AFF115D2BF_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_75CD1165_1F7E_4B8C_A7F0_DE0EAA53137C_KHI: ActiveSync connectivity (Internal) transaction failures._75CD1165_1F7E_4B8C_A7F0_DE0EAA53137C_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_7663dd96_cec2_4e20_a046_e4a37d8e0ab4_KHI: A failure was detected that may impact all copies of the database. Automatic recovery failed. The database should be dismounted._7663dd96_cec2_4e20_a046_e4a37d8e0ab4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_76768367_7459_4C25_8BA2_427D546124AA_KHI: The Outlook Web App proxy failed to verify access for the account used by the Exchange Client Access server._76768367_7459_4C25_8BA2_427D546124AA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_769983AD_9EB2_4526_B5FD_0559A373B300_KHI: Availability service requests to external host names failed._769983AD_9EB2_4526_B5FD_0559A373B300_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972001_KHI: TCP Connectivity Against Local Server - Address Book failure (NSPI)_76aaf2ee_f134_4f0e_925f_8f9cc0972001_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972002_KHI: TCP Connectivity Against Local Server - Address Book failure (ABREF)_76aaf2ee_f134_4f0e_925f_8f9cc0972002_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972003_KHI: TCP Connectivity Against Local Server - RPC Client Access failure (Connect)_76aaf2ee_f134_4f0e_925f_8f9cc0972003_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972004_KHI: TCP Connectivity Against Local Server - RPC Client Access failure (Logon)_76aaf2ee_f134_4f0e_925f_8f9cc0972004_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972005_KHI: TCP Connectivity Against Local Server - Unexpected Exception_76aaf2ee_f134_4f0e_925f_8f9cc0972005_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Enterprise_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972006_KHI: HTTP Connectivity Against Local Server - Address Book failure (NSPI)_76aaf2ee_f134_4f0e_925f_8f9cc0972006_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972007_KHI: HTTP Connectivity Against Local Server - Address Book failure (ABREF)_76aaf2ee_f134_4f0e_925f_8f9cc0972007_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972008_KHI: HTTP Connectivity Against Local Server - Autodiscover failure_76aaf2ee_f134_4f0e_925f_8f9cc0972008_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972009_KHI: HTTP Connectivity Against Local Server - RPC Client Access failure (Connect)_76aaf2ee_f134_4f0e_925f_8f9cc0972009_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc097200A_KHI: HTTP Connectivity Against Local Server - RPC Client Access failure (Logon)_76aaf2ee_f134_4f0e_925f_8f9cc097200A_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc097200B_KHI: HTTP Connectivity Against Local Server - Unexpected Exception_76aaf2ee_f134_4f0e_925f_8f9cc097200B_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76aaf2ee_f134_4f0e_925f_8f9cc0972999_KHI: HTTP Connectivity Against Local Server - RPC over HTTP failure (RpcProxy)_76aaf2ee_f134_4f0e_925f_8f9cc0972999_Microsoft.Exchange.2010.ClientAccessOutlookLocalServerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookConnectivity_diagnostic_cmdlet_Internal_TruePublic
_76D81B36_60B2_4DE5_AFAC_BCC678E8715A_NonServiceImpacting: There was an Outlook Web App connectivity (Internal) transaction failure. The Test-OWAConnectivity cmdlet must be run on a Client Access server._76D81B36_60B2_4DE5_AFAC_BCC678E8715A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_770AD094_5F7D_417f_A6CC_14E8B43FE148_KHI: Transport latency impacted - 80th percentile of messages not meeting SLA over last 30 min - Red(>90)._770AD094_5F7D_417f_A6CC_14E8B43FE148_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_774fb26e_ca79_43d3_9250_9029291b4f62_KHI: The Microsoft Exchange Replication service was not able to enable the Active Manager RPC listener._774fb26e_ca79_43d3_9250_9029291b4f62_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_775C91B2_92FC_4B25_8D92_4BB267B641A1_KHI: The file that lists the mobile operators and their capabilities can't be found_775C91B2_92FC_4B25_8D92_4BB267B641A1_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_78C38024_8CEE_48b6_B2C1_634B8AF08FE3_Forensic: Local database copy encountered a serious I/O error (active lost flush) that may have affected all copies of the database._78C38024_8CEE_48b6_B2C1_634B8AF08FE3_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_78D885FA_C48F_4A19_A90B_E131CA2F1064_KHI: An error occurred while the Test-UMConnectivity (Local Voice) cmdlet was running._78D885FA_C48F_4A19_A90B_E131CA2F1064_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_78e4a123_a361_47aa_b0f4_913db59996b0_KHI: The database copy has more user load than it can support. Users need to be moved to a different database and/or server._78e4a123_a361_47aa_b0f4_913db59996b0_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_791FB07F_5509_4f37_8A0F_24E442EA61D6_KHI: A POP3 connectivity transaction failure occurred. The NetworkCredential value for the given MailboxCredential is set to null._791FB07F_5509_4f37_8A0F_24E442EA61D6_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_79B2A7AF_7727_48af_8678_66D22724F918_KHI: Transport Protection Rule failed to apply policy due to disabled Internal Licensing configuration_79B2A7AF_7727_48af_8678_66D22724F918_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_79CB1AB7_6002_4580_B0AF_66A2F4415F2A_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._79CB1AB7_6002_4580_B0AF_66A2F4415F2A_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_7A7FE8D1_76A9_45B2_9A9D_773492016D2E_KHI: The Tranport service failed to create the Pickup directory. Pickup won't function until the directory is created._7A7FE8D1_76A9_45B2_9A9D_773492016D2E_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7AC883FB_53DD_4056_8DDE_D5B887FC2CBB_Forensic: MSExchangePop3: Average RPC Latency Red>1000ms_7AC883FB_53DD_4056_8DDE_D5B887FC2CBB_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_7C1D3115_4C58_4872_BF8B_23E8631E0C7A_NonServiceImpacting: Couldn't categorize a non-expirable message._7C1D3115_4C58_4872_BF8B_23E8631E0C7A_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7C36B2E1_A262_4924_99A1_48A9193AE8CE_KHI: The patch page read from a file failed to verify because of a page checksum mismatch. Identify and resolve any hardware problems._7C36B2E1_A262_4924_99A1_48A9193AE8CE_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7C898FD4_3E14_46EA_AF26_43C799A030B5_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._7C898FD4_3E14_46EA_AF26_43C799A030B5_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_7CB0A86C_C192_4B0F_B0EA_C9690E86F144_KHI: OABGen failed to download the files currently in the offline address book. This OAB will not be generated._7CB0A86C_C192_4B0F_B0EA_C9690E86F144_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7CB597F4_2A22_4a2a_9E54_1682F28C4563_KHI: The database copy has been falling behind the active copy for 1 hour._7CB597F4_2A22_4a2a_9E54_1682F28C4563_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplicationSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_7CE8405C_4907_44DA_930E_7429C62FEE60_KHI: System Attendant was unable to find the Exchange server object in the Active Directory._7CE8405C_4907_44DA_930E_7429C62FEE60_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_7DCC252D_3D32_49AC_9E92_875433B59DE3_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid. Review MSExchangeOWA event 8 for the cause._7DCC252D_3D32_49AC_9E92_875433B59DE3_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_7ED1A48D_2DBD_46b3_8D79_C6E2BE671C20_KHI: Transport Decryption and/or Journal Report Decryption Impacted - More than 5\% of IRM messages failed to decrypt in the last 30 minutes - Red(>5)._7ED1A48D_2DBD_46b3_8D79_C6E2BE671C20_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_7fe1f916_14f8_4eae_8ccd_0a9ab60a13a3_Forensic: The local topology server does not belong to any Active Directory site._7fe1f916_14f8_4eae_8ccd_0a9ab60a13a3_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_801d4070_d4cd_4f92_aecc_607d7f4a3061_KHI: A database copy experienced a failure that can't be corrected. The database copy may terminate replication or dismount._801d4070_d4cd_4f92_aecc_607d7f4a3061_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_80d898e6_58fe_45e1_9c04_0ba31357b532_KHI: Monitoring failed to run the Test-MRSHealth cmdlet._80d898e6_58fe_45e1_9c04_0ba31357b532_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_8102B570_A7BC_47a3_9F9B_F1EDCBBE00A5_KHI: Availability Service Initialization Failure_8102B570_A7BC_47a3_9F9B_F1EDCBBE00A5_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8127E33B_C8EC_49e7_A976_4C415463B2DB_KHI: Transport latency impacted - 99th percentile of messages not meeting SLA over last 30 min - Red(>90)._8127E33B_C8EC_49e7_A976_4C415463B2DB_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_82109CA0_7A80_4e18_A3BB_764447A820E7_KHI: A POP3 connectivity transaction failure occurred. The Microsoft Exchange Information Store service isn't running._82109CA0_7A80_4e18_A3BB_764447A820E7_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_821F49EA_F9CA_4D46_8E81_BA540AC6056C_KHI: The Content Filter agent couldn't be initialized because notification of the file system change couldn't be initialized._821F49EA_F9CA_4D46_8E81_BA540AC6056C_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_82E5612C_0C3B_4f56_90F1_5AA01E3E71DE_KHI: Federated delivery message decryption impacted - more than 90\% of messages failed to decrypt during cross-premises decryption over the last 30 minutes - Red(>90)._82E5612C_0C3B_4f56_90F1_5AA01E3E71DE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_83AA8423_3FE6_4a85_A9CF_02EC5F4ECF54_KHI: ExchangeSearch Zero Results Queries: greater than or equal 100_83AA8423_3FE6_4a85_A9CF_02EC5F4ECF54_Microsoft.Exchange.2010.Mailbox.DatabaseCopySearchableSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_8441B9CF_421B_4ebd_9528_CEE1A33C7C26_KHI: An IMAP4 connectivity transaction failure occurred. The specified server version is older than the currently-supported versions._8441B9CF_421B_4ebd_9528_CEE1A33C7C26_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_84ec6e7b_f48e_4151_af19_fbee01bf02bf_KHI: The database copy is low on log volume space. The volume has reached error levels._84ec6e7b_f48e_4151_af19_fbee01bf02bf_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_857d3ecf_3f75_4ddc_8b6f_0f9b0776436e_KHI: A memory allocation failure affected a database copy on the local server. The database copy may terminate replication or dismount._857d3ecf_3f75_4ddc_8b6f_0f9b0776436e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_85904634_3C94_4E81_B48C_32EED49AA880_KHI: An Exchange ActiveSync connectivity (Internal) transaction failure occurred. The test credentials can't be used to test Exchange ActiveSync._85904634_3C94_4E81_B48C_32EED49AA880_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_85CE1B27_48C3_4ABD_B5CE_D6780221E34A_KHI: The Content Filter agent couldn't be initialized. There may be corrupted files._85CE1B27_48C3_4ABD_B5CE_D6780221E34A_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_86C3967B_1BB5_4d03_9E8E_8CC899E858C9_KHI: The Microsoft Exchange Mailbox Assistants Service startup is being delayed due to continuous crashes_86C3967B_1BB5_4d03_9E8E_8CC899E858C9_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_86ea1412_76fe_4e78_a3a0_851625263c0b_KHI: The Microsoft Exchange Mailbox Replication service wasn't able to unlock the target mailbox after the move._86ea1412_76fe_4e78_a3a0_851625263c0b_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_86F63956_43FF_49ea_8373_0883D4874172_KHI: A Unified Messaging server couldn't be located to handle the call for a particular mailbox._86F63956_43FF_49ea_8373_0883D4874172_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8776E3FC_7BCB_46A7_92E3_667749050936_KHI: Failed to execute the Test-OWAConnectivity (External) diagnostic cmdlet._8776E3FC_7BCB_46A7_92E3_667749050936_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_8781d6b6_2efa_488e_80ac_8e2e794e0236_KHI: The local database copy contains corruption. This problem can be corrected by reseedng the database copy. The database copy will terminate replication or dismount._8781d6b6_2efa_488e_80ac_8e2e794e0236_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_88843BB7_0D96_4c34_B94B_F1105516E982_Forensic: Stagnation of events in notification queue has been detected._88843BB7_0D96_4c34_B94B_F1105516E982_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopyMicrosoft.Exchange.2010.Mailbox.DatabaseSearchCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_88C639AC_64D0_4950_B615_FA0B2F08886D_KHI: The current physical size of the database file is close to the maximum database size._88C639AC_64D0_4950_B615_FA0B2F08886D_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_88E477DB_10E0_433a_9D5C_0157151B99E3_KHI: An IMAP4 connectivity transaction failure occurred. The Mailbox database wasn't found._88E477DB_10E0_433a_9D5C_0157151B99E3_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_89268706_F4FF_466d_AE2B_2D4328BBF39C_KHI: HTTP Service Request Queues: CurrentQueueSize Red>500_89268706_F4FF_466d_AE2B_2D4328BBF39C_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_894EB526_B34B_4BEB_B76D_381AABC89198_KHI: Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objects in Active Directory._894EB526_B34B_4BEB_B76D_381AABC89198_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8B3EBD35_BF76_4802_8C43_60352427688A_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to a LogSessionManager startup error._8B3EBD35_BF76_4802_8C43_60352427688A_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8C20982A_DC65_4339_A45B_C8519F1D307B_Forensic: Failed to create EWS mailer. The CAS server corresponding to the log mailbox might be offline. Check the Event Log for more details._8C20982A_DC65_4339_A45B_C8519F1D307B_Microsoft.Exchange.2010.AuditingMicrosoft.Exchange.2010.Auditing.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_8C636AD1_7292_415D_B985_0EE9DA051D7D_KHI: There is no default authoritative domain or the domain name is empty._8C636AD1_7292_415D_B985_0EE9DA051D7D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8C90B6D4_06F7_4e28_819C_9A259619C533_KHI: An error occurred while the Get-PerimeterQueueInfo diagnostic cmdlet was running._8C90B6D4_06F7_4e28_819C_9A259619C533_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Get_PerimeterQueueInfo_diagnostic_cmdlet_for_FOPE_Inbound_queues.TruePublic
_8ca2d0f2_8251_47c6_996e_dfa50287dec1_KHI: The database copy is low on database volume space and continues to grow. The volume has reached error levels under 16\% free._8ca2d0f2_8251_47c6_996e_dfa50287dec1_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_8CB6F826_0099_486d_9D0B_CF4EEF4BEB67_KHI: The database copy isn't replaying log files fast enough for the last two hours to keep up or catch up with the changes being made to the active database copy._8CB6F826_0099_486d_9D0B_CF4EEF4BEB67_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplaySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_8D2BFEA0_E913_4942_AA24_402406CDFDF5_KHI: Failed to retrieve the health states for a collection of monitoring objects and monitors. Please check the health of RMS._8D2BFEA0_E913_4942_AA24_402406CDFDF5_Microsoft.Exchange.2010.MonitoringCorrelationEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_8D34890F_F02C_43C1_A3F3_E1B9EC60F2C7_KHI: Corruption was detected during soft recovery in the log file. The log file is damaged and is unusable. This may be caused by faulty hardware._8D34890F_F02C_43C1_A3F3_E1B9EC60F2C7_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8D36B31E_A62C_4d06_BE85_656CC2B4A69B_Forensic: The database engine has consumed 99\% of the "b-trees" resource (87048 used out of a maximum of 87696) for the database._8D36B31E_A62C_4d06_BE85_656CC2B4A69B_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_8DB2CABB_EC85_4D83_BFC5_2A67DC727773_KHI: Rule collection was not loaded because of configuration errors. Messages will be deferred._8DB2CABB_EC85_4D83_BFC5_2A67DC727773_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8E06CE1D_CC75_4E36_85D3_B08D0252CB51_KHI: Could not establish a secure LDAP connection to the server. The domain controller is not running Windows 2000 SP3 or later._8E06CE1D_CC75_4E36_85D3_B08D0252CB51_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8E098868_2BB9_4f21_A284_8C92AF9DC06B_Forensic: MSExchangeImap4: Transient Errors Rate Red>10 per min_8E098868_2BB9_4f21_A284_8C92AF9DC06B_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_8E5593E2_21B1_4793_B712_59603BBE0D62_KHI: A corrupted page link was detected in a B-Tree. This may be caused by a hardware failure or antivirus software._8E5593E2_21B1_4793_B712_59603BBE0D62_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8EF5D63E_85A4_4b98_B068_B1306288D7D1_KHI: Too many failed message tracking requests via task - Yellow (>3\%) -_8EF5D63E_85A4_4b98_B068_B1306288D7D1_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_8f635dac_9cf6_423d_8455_16c8ca9ee974_KHI: A database experienced a hard I/O error in NTFS. NTFS failed to allow the creation of a file as part of a failover._8f635dac_9cf6_423d_8455_16c8ca9ee974_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_8FB5C814_95CC_4a9b_AE84_7E08FC0DF978_KHI: Events are not being Processed for a database._8FB5C814_95CC_4a9b_AE84_7E08FC0DF978_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_91621ee3_d3ec_4c9b_984a_8edeef4edc24_KHI: The Microsoft Exchange Replication service is not running._91621ee3_d3ec_4c9b_984a_8edeef4edc24_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_91CBF52A_13DD_4337_88EB_F629C150100D_KHI: Delivery Failure Delivery-StoreDriver 5.2.0 happened over last 5 minutes - Yellow(>2)._91CBF52A_13DD_4337_88EB_F629C150100D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_91ea011c_4dc2_4733_a80d_f37848da444d_KHI: This database has had only one healthy copy for over 20 minutes of the last hour._91ea011c_4dc2_4733_a80d_f37848da444d_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9220882B_E02E_4184_9C80_741C2201FEFE_KHI: Unable to run the Get-PerimeterQueueInfo diagnostic cmdlet._9220882B_E02E_4184_9C80_741C2201FEFE_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Get_PerimeterQueueInfo_diagnostic_cmdlet_for_FOPE_Inbound_queues.TruePublic
_92389F76_5F41_4524_B025_7F6BF9133887_KHI: EdgeTransport.exe process has been repeatedly failing within the last 45 minutes._92389F76_5F41_4524_B025_7F6BF9133887_Microsoft.Exchange.2010.HubTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_9248222D_7A73_469d_98D3_F6A5EB1EAB25_KHI: An error occurred during an Mserv lookup._9248222D_7A73_469d_98D3_F6A5EB1EAB25_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_92D27124_8067_47D1_BC12_E2C6515A3BD1_KHI: Outlook Web App failed to initialize. A referenced forms registry folder doesn't exist. Review MSExchangeOWA event 1 for the cause._92D27124_8067_47D1_BC12_E2C6515A3BD1_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_93558cf0_e063_45b1_b57a_0d4b53e0d615_KHI: The Microsoft Exchange Information Store service (MSExchangeIS) isn't running._93558cf0_e063_45b1_b57a_0d4b53e0d615_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_941DC03D_9ED0_411c_B78C_AA59DE1073EF_KHI: Active Sync is temporarily suspending requests to an unresponsive mailbox server. Users with mailboxes on this server may not be able to sync until the server recovers._941DC03D_9ED0_411c_B78C_AA59DE1073EF_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9440637D_3CDB_4F56_A5B5_6E4B217C2F43_KHI: CI Troubleshooter failed to resolve issues_9440637D_3CDB_4F56_A5B5_6E4B217C2F43_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_94546773_4868_4d80_8cbd_b69bf8e25310_KHI: Corrupted log files exist on a database copy outside the database's required log range. A successful failover restored service._94546773_4868_4d80_8cbd_b69bf8e25310_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_945b8fdf_a054_4de6_b26f_91763081252a_KHI: The database availability group is experiencing problems that may cause it to eventually fail due to stale security information._945b8fdf_a054_4de6_b26f_91763081252a_Microsoft.Exchange.2010.Mailbox.ClusterFswSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_94886AEA_F111_4B28_900B_65869E4AD0A4_Forensic: There was an error loading the journaling agent configuration._94886AEA_F111_4B28_900B_65869E4AD0A4_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesMicrosoft.Exchange.2010.HubTransportAgentsMessagingPolicies.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_9515A8CC_ECBC_495B_BE8C_2558D99F82E9_KHI: Exchange Control Panel connectivity (External) transaction warnings._9515A8CC_ECBC_495B_BE8C_2558D99F82E9_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_954CF694_2CC6_4ab8_AC59_88305CE0B885_Forensic: MSExchangeImap4: Average LDAP Latency Red>1000ms_954CF694_2CC6_4ab8_AC59_88305CE0B885_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_958FB7AC_9DF6_45E4_8991_7EDD6D78FB64_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to a message tracking log error._958FB7AC_9DF6_45E4_8991_7EDD6D78FB64_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_959F10A7_6010_40BD_A18A_58FF28AF1C98_KHI: An error occurred while running the Test-WebServicesConnectivity cmdlet in internal mode._959F10A7_6010_40BD_A18A_58FF28AF1C98_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_95A7E512_E281_4282_A3F8_D03250D0AFEE_KHI: A non-transient error blocked replication startup of a database copy._95A7E512_E281_4282_A3F8_D03250D0AFEE_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_95AF3CD8_CC5E_472F_8E7F_40FC5F3007FA_KHI: WebReady Document Viewing isn't registered. To correct this problem, reinstall Outlook Web App._95AF3CD8_CC5E_472F_8E7F_40FC5F3007FA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_95D89044_653C_43F7_997E_420A313224B4_KHI: Outlook Web App connectivity (Internal) transaction warnings._95D89044_653C_43F7_997E_420A313224B4_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_9705283E_8972_4898_BB23_27CD76750386_KHI: There was an Outlook Web App connectivity (Internal) transaction failure. The Client Access server configuration check failed._9705283E_8972_4898_BB23_27CD76750386_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_978B00BA_E283_4F88_AD5E_F59D7EEE3342_KHI: A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 22 for the cause._978B00BA_E283_4F88_AD5E_F59D7EEE3342_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_97ca310c_fe3b_44ab_ac3b_06642541ea03_Forensic: Unable to load the performance counters for the Microsoft Exchange Mail Submission Service. The respective Performance object is named MSExchangeMail Submission._97ca310c_fe3b_44ab_ac3b_06642541ea03_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_98042037_5FA8_42eb_B181_382ECC6665F1_KHI: The database copy is low on database volume space. The volume has reached critical levels (8\% free)._98042037_5FA8_42eb_B181_382ECC6665F1_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_985942B1_F943_48a8_A1C6_79901E654A74_KHI: Restart of search services failed._985942B1_F943_48a8_A1C6_79901E654A74_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9867315F_CAFD_41b9_A142_53901A4D01C3_KHI: The Test-CalendarConnectivity cmdlet failed to run in internal mode._9867315F_CAFD_41b9_A142_53901A4D01C3_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_CalendarConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_99781086_94d4_4aad_8c1b_9c6bc57caae1_KHI: A memory allocation failure affected a database copy on the local server. The database copy may terminate replication or dismount._99781086_94d4_4aad_8c1b_9c6bc57caae1_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9AB6DDEC_E366_419b_82C7_04C1EB53B5BD_Forensic: The Exchange store database: RPC Average Latency - sustained for 5 minutes - Yellow (>50 msec)._9AB6DDEC_E366_419b_82C7_04C1EB53B5BD_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceMicrosoft.Exchange.2010.Mailbox.DatabaseCopyPerformance.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_9ACE2DDD_B5D7_46C0_8536_6015B9F51EDE_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._9ACE2DDD_B5D7_46C0_8536_6015B9F51EDE_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9BE7F995_58A8_493d_B45F_350656D640C0_KHI: Calendar Connectivity transaction warnings - Virtual Directory is not enabled for Anonymous Calendar Sharing._9BE7F995_58A8_493d_B45F_350656D640C0_Microsoft.Exchange.2010.ClientAccessAnonymousCalendarSharingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_CalendarConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_9c2ec8a8_4c05_4977_be28_6a4a89ccd23c_KHI: A storage performance problem is affecting the database copy on the local server. Client performance may be affected._9c2ec8a8_4c05_4977_be28_6a4a89ccd23c_Microsoft.Exchange.2010.Mailbox.DatabaseCopyIntegritySuppressionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_9c4a9e22_04d9_4ca2_8cc5_dcfbb9170b05_KHI: The Microsoft Exchange System Attendant service (MSExchangeSA) isn't running._9c4a9e22_04d9_4ca2_8cc5_dcfbb9170b05_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_9C5C1CA0_26DE_44e6_97B7_CFEA8728C6C3_KHI: The database copy is low on database volume space. The volume is 25\% free._9C5C1CA0_26DE_44e6_97B7_CFEA8728C6C3_Microsoft.Exchange.2010.Mailbox.PublicFolderDatabaseEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_9CC640FE_0077_445a_B37A_48E5082DB748_KHI: An IMAP4 connectivity transaction failure occurred. No Exchange virtual server was found on the node specified by the user._9CC640FE_0077_445a_B37A_48E5082DB748_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_9D3052F1_40BC_4a62_A3B7_C1E7E3B3C953_KHI: Test-MailFlow was unable to send a cross-premises test message due to mailbox MAPI session failure._9D3052F1_40BC_4a62_A3B7_C1E7E3B3C953_Microsoft.Exchange.2010.Mailbox.CrossPremisesMailflowMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_Mailflow_CrossPremises_diagnostic_cmdlet.TruePublic
_9D909D0A_89B0_4090_97D8_7AA4AC6DCDBF_KHI: MSExchangeTransport detected a critical storage error but didn't complete the recovery action. The service has stopped; please investigate._9D909D0A_89B0_4090_97D8_7AA4AC6DCDBF_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_9e0be3b0_c686_4752_ae73_ed6ccb3889c5_KHI: The Exchange store has failed to start due to an error retrieving the local host information._9e0be3b0_c686_4752_ae73_ed6ccb3889c5_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_9E423332_ED7F_40a5_BBA9_F802EA2B2DD5_KHI: Failed to run the Test-AssitantHealth diagnostic cmdlet._9E423332_ED7F_40a5_BBA9_F802EA2B2DD5_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_9EE719A0_E3C9_44C7_A33B_CCFB47B49D1B_KHI: Failed to initialize DSAccess. Proxy address calculation services will not be available on the local Exchange server._9EE719A0_E3C9_44C7_A33B_CCFB47B49D1B_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_9F5096C0_387A_434B_BE9C_E6AE312BAE07_KHI: A Receive connector has failed connectivity testing twice within the last 10 minutes._9F5096C0_387A_434B_BE9C_E6AE312BAE07_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_SmtpConnectivity_diagnostic_cmdlet.TruePublic
_9FC504B9_3332_4773_8297_79CDBA4733FE_KHI: Delivery Failure Routing 5.4.4 happened over last 5 minutes - Yellow(>5)._9FC504B9_3332_4773_8297_79CDBA4733FE_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_A0474BE5_42D8_4971_8116_3900A423CF12_KHI: A POP3 connectivity transaction failure occurred. The session object hasn't been created._A0474BE5_42D8_4971_8116_3900A423CF12_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_A04A9A11_B875_4ec4_901C_C07C0381A8C4_KHI: The Autodiscover request failed to complete using external host names._A04A9A11_B875_4ec4_901C_C07C0381A8C4_Microsoft.Exchange.2010.ClientAccessAutoDiscoverySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OutlookWebServices_diagnostic_cmdlet.TruePublic
_A0E29D95_7ED1_443F_8EB4_B83EF87731A2_Forensic: Error occurred while saving audit information. Check the Event Log for more details._A0E29D95_7ED1_443F_8EB4_B83EF87731A2_Microsoft.Exchange.2010.AuditingMicrosoft.Exchange.2010.Auditing.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_A2081208_6F97_46B5_818B_455AEC4F5D16_KHI: There was a Web Services connectivity (Internal) transaction failure. The credentials supplied can't be used to test Web Services._A2081208_6F97_46B5_818B_455AEC4F5D16_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_A27715B3_C4FB_4CEB_9EEC_B5EEF1D876D9_KHI: Recovery for catalog has been disabled_A27715B3_C4FB_4CEB_9EEC_B5EEF1D876D9_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_A2C58027_4C90_4911_972D_737AA5CD3429_Forensic: MSExchangePop3: Transient Mailbox Connection Failures Rate Red>10 per min_A2C58027_4C90_4911_972D_737AA5CD3429_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_A38D3B5B_5627_4C21_8AA7_22592DC64B40_KHI: The database is already in use. The service will be stopped._A38D3B5B_5627_4C21_8AA7_22592DC64B40_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_a393ad84_eba1_4d96_9782_113974f0aefc_KHI: The Microsoft Exchange File Distribution service (MSExchangeFDS) isn't running._a393ad84_eba1_4d96_9782_113974f0aefc_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_A3A85FAF_0846_437E_86CF_DDB12B4574ED_KHI: Search service is being continuously restarted by the CI troubleshooter_A3A85FAF_0846_437E_86CF_DDB12B4574ED_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_A3C4E4B6_490E_40e2_89D6_7FBF03ADCFB5_KHI: One of the recipients resolved to multiple addresses; therefore, the message will be deferred. Review the event description, and correct the recipient configuration._A3C4E4B6_490E_40e2_89D6_7FBF03ADCFB5_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_A3D45C91_497F_48B2_B6DF_DBBCC44140AD_KHI: An Active Directory search has failed. Cannot access schema information._A3D45C91_497F_48B2_B6DF_DBBCC44140AD_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_A4C09984_FA2E_45DD_AA86_99188E96C4F9_KHI: Netlogon service queue backup - sustained for 10 minutes - Red(>30)._A4C09984_FA2E_45DD_AA86_99188E96C4F9_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_a4f02f59_88ad_4bd0_86a1_1dc374bd2069_KHI: The Windows Remote Management Service (WinRM) isn't running._a4f02f59_88ad_4bd0_86a1_1dc374bd2069_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_A6527170_9C70_45c9_AF5C_3266CBCEB9FF_KHI: Corrupted log files exist on a database copy within the database's required log range. A successful failover restored service._A6527170_9C70_45c9_AF5C_3266CBCEB9FF_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_A85A26E8_6B30_444f_A430_19B1241222AF_KHI: A user mailbox has hit session limits._A85A26E8_6B30_444f_A430_19B1241222AF_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_A85DBD19_4187_4926_8129_C6A31E323BFE_KHI: Exchange Control Panel connectivity (Internal) transaction failure - Client Access server configuration check failure._A85DBD19_4187_4926_8129_C6A31E323BFE_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_a86210c5_1427_41d1_957f_04d86afe8fbc_KHI: A directory error occurred while running the Test-MAPIConnectivity cmdlet._a86210c5_1427_41d1_957f_04d86afe8fbc_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_TruePublic
_a8a1b25b_26d7_49b7_b60b_ece10c9d0f95_KHI: Detected indexing backlog for multiple databases on server_a8a1b25b_26d7_49b7_b60b_ece10c9d0f95_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_A8FF8474_0A25_4752_BEDF_11FEAF631EC3_KHI: System Attendant failed to add the local computer as a member of the Active Directory service group object._A8FF8474_0A25_4752_BEDF_11FEAF631EC3_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_a9b0e0f6_1313_4d7e_9bd6_38de868aaaac_KHI: The database copy must be reseeded due to an error in the database copy. The database copy status is failed and suspended._a9b0e0f6_1313_4d7e_9bd6_38de868aaaac_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_AAE5D1FB_13F1_4391_A6AD_50CC90FF4B43_KHI: In-Forest MailTips isn't responding to requests within SLA - Red (>10s) -_AAE5D1FB_13F1_4391_A6AD_50CC90FF4B43_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_AB58ABB8_9305_4EC6_AAE7_24CB69537EDC_NonServiceImpacting: Read-only files have been found in the Pickup directory._AB58ABB8_9305_4EC6_AAE7_24CB69537EDC_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_acf19cd8_7644_4f64_a875_03e7ef55e33c_KHI: The Microsoft Exchange Address Book service (MSExchangeAB) isn't running._acf19cd8_7644_4f64_a875_03e7ef55e33c_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_AD53E509_9671_48b2_A032_28DBB87498B1_KHI: Client Access: OAB is getting too large Red>965738496 bytes (921 MB)_AD53E509_9671_48b2_A032_28DBB87498B1_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_ADF6E4C3_968E_4078_BDAC_45831C6553B3_Forensic: MSExchangeImap4: Permanent Storage Errors Rate Red>10 per min_ADF6E4C3_968E_4078_BDAC_45831C6553B3_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_aec6c194_d147_4e99_b36d_9ee515c6e63b_KHI: The Microsoft Exchange Mailbox Replication service isn't running._aec6c194_d147_4e99_b36d_9ee515c6e63b_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_AF52BE08_8E71_4d23_8DC0_1CC2BC50F4D7_KHI: Percent of Active Hub Servers over last 30 minutes - Red(<10) - Edge Server._AF52BE08_8E71_4d23_8DC0_1CC2BC50F4D7_Microsoft.Exchange.2010.Mailbox.MailSubmissionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_AF8995E2_DDDD_4BB2_B108_963142F2469C_KHI: Failed to sync entries to EHF._AF8995E2_DDDD_4BB2_B108_963142F2469C_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_AFD0F851_175E_422f_9D68_8A392BAE2229_KHI: Transport availability impacted - Server down over last 5 minutes - Red(<50)._AFD0F851_175E_422f_9D68_8A392BAE2229_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_AFE7C58E_6178_4ef3_A07A_1B70638C5397_Forensic: Perimeter queue level is above warning threshold._AFE7C58E_6178_4ef3_A07A_1B70638C5397_Microsoft.Exchange.2010.HubTransportQueuesMicrosoft.Exchange.2010.HubTransportQueues.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Get_PerimeterQueueInfo_diagnostic_cmdlet_for_FOPE_Inbound_queues.TruePublic
_B048F00C_2099_49E1_91B5_88221308B369_KHI: The Microsoft Exchange Transport Log Search service failed to read configuration from Active Directory._B048F00C_2099_49E1_91B5_88221308B369_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_B14594D0_7D32_4195_8AD4_2EE37B22AC9F_KHI: MSExchange OWA: Failed Requests/s Red>10_B14594D0_7D32_4195_8AD4_2EE37B22AC9F_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B286EDB3_D68E_4ca9_B90F_8433652D4D89_KHI: Incremental reseed failed the initial checks. The passive database copy cannot be resynchronized with the active database copy._B286EDB3_D68E_4ca9_B90F_8433652D4D89_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B29CA4A5_27E8_4772_A1C8_B80BB528E8DC_KHI: LDAP Fatal errors per minute - sustained for 2 minutes - Yellow(>20)._B29CA4A5_27E8_4772_A1C8_B80BB528E8DC_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B2AD4F21_F51E_476C_AEDF_9C8FB3832EFB_KHI: An error occurred while executing the Test-OWAConnectivity (Internal) cmdlet._B2AD4F21_F51E_476C_AEDF_9C8FB3832EFB_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_B2B4A2A5_977B_47FA_B9EC_7D47A655B8F9_KHI: The transaction log sequence for a database is about to run out of available file names._B2B4A2A5_977B_47FA_B9EC_7D47A655B8F9_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_b373056b_0dd7_43bd_bf62_e53112daba6c_KHI: Active copy corrupt_b373056b_0dd7_43bd_bf62_e53112daba6c_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_b3998d8b_df68_4199_a25f_f348cffdbdf5_KHI: The Exchange store failed to start because the RPC listener registration failed._b3998d8b_df68_4199_a25f_f348cffdbdf5_Microsoft.Exchange.2010.Mailbox.InformationStoreSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_B3B16112_D6EB_4B1F_AFD4_C33FE14C8667_KHI: An IP gateway or IP PBX didn't respond to a SIP OPTIONS request from the Unified Messaging server or couldn't be contacted._B3B16112_D6EB_4B1F_AFD4_C33FE14C8667_Microsoft.Exchange.2010.UnifiedMessaging.Availability.GatewaySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B448B58D_C97D_4BB5_A630_3884DC49C1D7_KHI: The Exchange Information Store: Delivery Blocked: Low Log Disk Space._B448B58D_C97D_4BB5_A630_3884DC49C1D7_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B46E61E8_E102_4799_9358_872BDB659547_KHI: MSExchange OWA: Mailbox Offline Exception Percentage Red>10_B46E61E8_E102_4799_9358_872BDB659547_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B4891BB1_C37A_4249_ACF8_D8C236494764_KHI: LDAP Searches timed out per minute - sustained for 2 minutes - Red(>20)._B4891BB1_C37A_4249_ACF8_D8C236494764_Microsoft.Exchange.2010.CommonDomainControllerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B49DEF35_3BE5_4270_916B_9BC4D5211472_KHI: Continuous reseed loop detected for a catalog_B49DEF35_3BE5_4270_916B_9BC4D5211472_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B4EC1F25_98AA_44e1_84ED_767E1F749194_KHI: A POP3 connectivity transaction failure occurred. The Client Access server wasn't specified._B4EC1F25_98AA_44e1_84ED_767E1F749194_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_B533D3DC_E3B9_49E1_A5A1_1D31569EA10E_NonServiceImpacting: The Microsoft Exchange Unified Messaging service certificate is nearing its expiration date._B533D3DC_E3B9_49E1_A5A1_1D31569EA10E_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceMicrosoft.Exchange.2010.UnifiedMessaging.Availability.Service.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B534D3DC_E3B9_49E0_B5A4_1D31559EA10D_KHI: The Microsoft Exchange Unified Messaging service failed to start._B534D3DC_E3B9_49E0_B5A4_1D31559EA10D_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_b54f9f66_df9e_46ff_96a8_feaa4bbed681_KHI: The Microsoft Exchange Mailbox Replication service isn't scanning MDB queues for jobs._b54f9f66_df9e_46ff_96a8_feaa4bbed681_Microsoft.Exchange.2010.ClientAccessMailboxReplicationServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_MRSHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_B55A01FE_124F_4b01_B1B4_6EC95371C178_KHI: Too many failed message tracking requests via EWS - Red (>5\%) -_B55A01FE_124F_4b01_B1B4_6EC95371C178_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B5752ED1_4803_4575_B2EA_F13907E91B3D_KHI: Outlook Web App failed to initialize._B5752ED1_4803_4575_B2EA_F13907E91B3D_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B592DA00_25D1_407e_BA0E_58CD137C04A3_KHI: MSExchangeImap4: Average Command Processing Time Red>60s_B592DA00_25D1_407e_BA0E_58CD137C04A3_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_b60902a7_999b_4b2f_8294_86467325555c_KHI: Failed to execute the Test-ReplicationHealth diagnostic cmdlet._b60902a7_999b_4b2f_8294_86467325555c_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ReplicationHealth_diagnostic_cmdlet._Report_Collection_TruePublic
_B6C05632_F686_43b2_B177_577F3FAB8B38_KHI: Unexpected dismount of a database copy._B6C05632_F686_43b2_B177_577F3FAB8B38_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B70886DD_AA15_48d6_8EF1_4FC79DBF3B16_KHI: Retry Non-Smtp Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport._B70886DD_AA15_48d6_8EF1_4FC79DBF3B16_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_b7126339_fce6_4e8b_a40b_4957f212f017_KHI: Unable to execute the Test-EdgeSyncEhf diagnostic cmdlet._b7126339_fce6_4e8b_a40b_4957f212f017_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_TruePublic
_B77D8E56_D44C_4e46_B8D8_54BD2DC2C48F_KHI: Transport IsMemberOfResolver ExpandedGroups Cache nearing capacity - Yellow(>66)._B77D8E56_D44C_4e46_B8D8_54BD2DC2C48F_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_b7862783_2e2c_452f_9062_c674bfae6f99_KHI: Database copy is suspended. The database copy isn't keeping up with the changes on the active database copy._b7862783_2e2c_452f_9062_c674bfae6f99_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_B7CF638F_AE9E_4389_BD3A_EADC8EA98495_KHI: Exchange Control Panel connectivity (Internal) transaction failure - The test credentials can't be used to test the Exchange Control Panel._B7CF638F_AE9E_4389_BD3A_EADC8EA98495_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_b82f2784_48e8_4a13_93f8_76fca5f29af5_KHI: Hard I/O error will dismount or terminate replication for the database copy on the local server._b82f2784_48e8_4a13_93f8_76fca5f29af5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B847294A_09AD_4E2D_A7C8_3066410359B1_KHI: Exchange couldn't find a certificate in the personal store on the local computer._B847294A_09AD_4E2D_A7C8_3066410359B1_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_B881F88D_5E2F_4cca_B348_A5EA5EFA79C1_KHI: Reseed of catalog failed._B881F88D_5E2F_4cca_B348_A5EA5EFA79C1_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B8D0D08A_98AC_4162_8254_3E5E1406F647_KHI: A serious I/O error (lost flush) was detected on a database copy. All copies of the database may be affected._B8D0D08A_98AC_4162_8254_3E5E1406F647_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B949F93C_266B_4307_B21F_E342DC801A52_KHI: Index of an information store table is corrupted. There is no single specific cause for this kind of corruption._B949F93C_266B_4307_B21F_E342DC801A52_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_B99C0462_6634_4CF6_8D22_737E352B80F5_KHI: Outlook Web App failed to initialize. A forms registry file isn't valid._B99C0462_6634_4CF6_8D22_737E352B80F5_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_B9A7DCB9_4D68_459f_9CD3_D7C7E38BC520_KHI: The Exchange information store process (store.exe) has consumed 4GB of memory._B9A7DCB9_4D68_459f_9CD3_D7C7E38BC520_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_BA1AF3DB_AF78_4396_949D_3C0A7FE39F7F_KHI: One or more unexpected NDRs have been received in response to Test-MailFlow cross-premises test messages._BA1AF3DB_AF78_4396_949D_3C0A7FE39F7F_Microsoft.Exchange.2010.Mailbox.CrossPremisesMailflowMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_Mailflow_CrossPremises_diagnostic_cmdlet.TruePublic
_BA5CFC17_5569_46cd_831C_9C8375F5B543_KHI: An IMAP4 connectivity transaction failure occurred. The specified server is not a Client Access server._BA5CFC17_5569_46cd_831C_9C8375F5B543_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_BA6E57EF_97A2_44af_951E_76F61219C511_KHI: Missing Availability Service Configuration Information for the Current Forest_BA6E57EF_97A2_44af_951E_76F61219C511_Microsoft.Exchange.2010.ClientAccessAvailabilityServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_BA860D5D_974B_49fd_A89A_BB660F173693_KHI: MSExchangePOP3 process is repeatedly crashing._BA860D5D_974B_49fd_A89A_BB660F173693_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_bb26bbcc_e86a_4db8_8737_9be12b9a95ca_KHI: A user mailbox has reached the recoverable items warning quota limit._bb26bbcc_e86a_4db8_8737_9be12b9a95ca_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_BB4ECBE4_D29E_4AF8_910C_3AD4886CC85A_KHI: Database page read failed verification because of a -1018 error (page checksum mismatch). This error is often caused by hardware issues._BB4ECBE4_D29E_4AF8_910C_3AD4886CC85A_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_BB65ACCF_C264_40BF_90E4_CCD85A4BD078_KHI: Outlook Web App failed to initialize. A forms registry file is not valid._BB65ACCF_C264_40BF_90E4_CCD85A4BD078_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_bba58cf7_47ab_47c1_ae0b_60c082af006a_KHI: The NTFS file attributes size for a database exceeds the threshold. This may prevent the database file from growing. Check for ESE event 739 in Event Viewer._bba58cf7_47ab_47c1_ae0b_60c082af006a_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_BBF9B9A7_4C4D_4A88_B696_EFE91376BB3A_KHI: A message from a domain-secured domain failed to authenticate because the TLS certificate does not contain the domain name._BBF9B9A7_4C4D_4A88_B696_EFE91376BB3A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_BDD568E5_0395_4BCA_AE83_1586966BC79C_KHI: A Web Services connectivity (Internal) transaction failure occurred. There was an Autodiscover failure._BDD568E5_0395_4BCA_AE83_1586966BC79C_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_BE1ABFD1_3BF9_4955_A442_D49B31A4EF70_KHI: Exchange Control Panel connectivity (External) transaction failure - The test credentials can't be used to test the Exchange Control Panel._BE1ABFD1_3BF9_4955_A442_D49B31A4EF70_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_BE83F6CA_0356_4E6D_936E_ADCFA3112A37_KHI: Outlook Web App failed to initialize. There are multiple forms registries with the same name._BE83F6CA_0356_4E6D_936E_ADCFA3112A37_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_BEBC2FE7_5420_44f0_A6CD_CA63CAB55CC0_Forensic: Failed to remove continuous replication files for a database copy._BEBC2FE7_5420_44f0_A6CD_CA63CAB55CC0_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_BECA4628_4D97_4a65_8398_FCD8DEE0D6D1_KHI: An IMAP4 connectivity transaction failure occurred. A security error was found._BECA4628_4D97_4a65_8398_FCD8DEE0D6D1_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_BED92DB5_29E1_4F09_BD7E_2125E4B7F8C0_KHI: The patch page read from a file failed to verify because of a page number mismatch. The patch file is corrupted._BED92DB5_29E1_4F09_BD7E_2125E4B7F8C0_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_bf06befc_c495_4940_b8f0_eb2ba802579a_KHI: The database copy isn't replaying log files fast enough to keep up or catch up with the changes being made to the active database copy._bf06befc_c495_4940_b8f0_eb2ba802579a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyReplaySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_BF4EA222_B710_4281_8B9F_78CDE798A98B_KHI: The database engine stopped an instance with error. Review the error code in the event Description._BF4EA222_B710_4281_8B9F_78CDE798A98B_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_bf7585b1_cb5b_4e44_b94f_4d4fb54009ba_KHI: The Microsoft Exchange Throttling service (MSExchangeThrottling) isn't running._bf7585b1_cb5b_4e44_b94f_4d4fb54009ba_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_c0fc6215_600b_483f_ab54_fcc204cdde5e_KHI: At startup, the Microsoft Exchange Replication service's VSS Writer failed to initialize. VSS backups of passive mailbox database copies are disabled._c0fc6215_600b_483f_ab54_fcc204cdde5e_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_C17004A8_EE28_4c60_9B1E_1FFE1F8B1101_KHI: MSExchangeMailboxAssistants Failed Requests - Resource Booking_C17004A8_EE28_4c60_9B1E_1FFE1F8B1101_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C187B89E_5B8B_4F1F_A2CD_4F0DCBA0ADE6_KHI: Outlook Web App connectivity (External) transaction failures._C187B89E_5B8B_4F1F_A2CD_4F0DCBA0ADE6_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_C24B83BF_4C7C_4B83_A336_6483688AD6BC_KHI: A read operation failed after attempting to correct a single-bit error. This is often caused by driver, firmware, or hardware issues._C24B83BF_4C7C_4B83_A336_6483688AD6BC_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_C2F64119_1FCB_45AF_B69E_8D570F2A5888_KHI: The database checkpoint file (.chk) is missing or corrupted. The Microsoft Exchange Transport service is shutting down._C2F64119_1FCB_45AF_B69E_8D570F2A5888_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_C3403CE3_8F5E_4ff4_B500_EB0CFC2A301A_KHI: Mailbox: Approaching too may client logons on Mailbox Yellow>48000_C3403CE3_8F5E_4ff4_B500_EB0CFC2A301A_Microsoft.Exchange.2010.Mailbox.ServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C39E6C48_22EB_49da_9A0D_65351A11FBFC_Forensic: Single page restore initiated to correct an error in a database copy._C39E6C48_22EB_49da_9A0D_65351A11FBFC_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_C3CD6612_B3FE_4126_918F_90323C50E861_KHI: WebServices connectivity (Internal) transaction failures._C3CD6612_B3FE_4126_918F_90323C50E861_Microsoft.Exchange.2010.ClientAccessWebServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_c43fe0f7_0fde_49a7_893d_8adc8811584f_KHI: The Exchange store has detected an RPC request timeout._c43fe0f7_0fde_49a7_893d_8adc8811584f_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C449F79A_1FCD_4641_813E_D72D19353DC0_NonServiceImpacting: There was an Outlook Web App connectivity (External) transaction failure. The Test-OWAConnectivity cmdlet must be run on a Client Access server._C449F79A_1FCD_4641_813E_D72D19353DC0_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessMicrosoft.Exchange.2010.ClientAccessOutlookWebAccess.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_c4942b78_eb34_46b7_b9aa_f0adc18a34fe_KHI: Replay service detected a problem reading failure-item events._c4942b78_eb34_46b7_b9aa_f0adc18a34fe_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_c4b3c56b_c302_4c80_8d09_56a2dd47a98f_KHI: Failed to execute the Test-EdgeSyncEhf diagnostic cmdlet._c4b3c56b_c302_4c80_8d09_56a2dd47a98f_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EdgeSyncEhf_diagnostic_cmdlet._Report_Collection_TruePublic
_C4DE92B1_510C_4b75_8558_22DABAD9D3D4_KHI: Corrupted log files exist on a database copy within the database's required log range. Recovery was unsuccessful._C4DE92B1_510C_4b75_8558_22DABAD9D3D4_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_C4F4833B_9728_448b_BE91_3AAE5FCBEB8E_KHI: MSExchangeTransportLogSearch.exe process has been repeatedly failing within the last 30 minutes._C4F4833B_9728_448b_BE91_3AAE5FCBEB8E_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_C54C75B0_8244_4FAE_8761_72C062C59A36_KHI: Microsoft Exchange Transport is rejecting messages because the available disk space has dropped below the configured threshold._C54C75B0_8244_4FAE_8761_72C062C59A36_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_C5BCF28B_6591_44e5_9733_C28256B9D5BB_KHI: Exceeded the supported mount limit of database copies on this server._C5BCF28B_6591_44e5_9733_C28256B9D5BB_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_C5D42171_F9B8_4C11_8DB7_9697330CB31D_KHI: The SmtpReceive process failed to start listening on a configured binding because the specified address is already in use._C5D42171_F9B8_4C11_8DB7_9697330CB31D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_C5F9DCF5_DE06_4ac3_BC17_E3BC0E8925E6_KHI: Indexing backlog >2 day for 60 min: Please restart the MS Search (Exchange) and Microsoft Exchange Search Indexer services._C5F9DCF5_DE06_4ac3_BC17_E3BC0E8925E6_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C63CEE89_982A_4B91_96A8_D48335172FEA_KHI: An Outlook Web App connectivity (Internal) transaction failure occurred. The test credentials can't be used to test Outlook Web App._C63CEE89_982A_4B91_96A8_D48335172FEA_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_C7136132_3E7A_42FE_8F7F_374F904491A9_KHI: The Content Filter agent couldn't be initialized because ExSMime.dll couldn't be initialized._C7136132_3E7A_42FE_8F7F_374F904491A9_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_C746F589_CBAC_422E_B0A3_B423629F0174_Forensic: Failed to save admin audit log. The log mailbox might be offline. Check the Event Log for more details._C746F589_CBAC_422E_B0A3_B423629F0174_Microsoft.Exchange.2010.AuditingMicrosoft.Exchange.2010.Auditing.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_c74e136f_dd70_4ebc_98b3_306dad023708_Forensic: The Microsoft Mail Submission Service encountered an exception when trying to load network topology information._c74e136f_dd70_4ebc_98b3_306dad023708_Microsoft.Exchange.2010.Mailbox.MailSubmissionMicrosoft.Exchange.2010.Mailbox.MailSubmission.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_C7B24DC0_12D1_4336_859E_D502574B8573_KHI: A POP3 connectivity transaction failure occurred. The version of the server is older than the supported versions._C7B24DC0_12D1_4336_859E_D502574B8573_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_C7CD1E2E_FB1D_44E9_8403_A19D9FD79D76_KHI: Catalog indexing stall for extended duration of time_C7CD1E2E_FB1D_44E9_8403_A19D9FD79D76_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_C7EB370F_1653_484d_B446_AA57B8B8E5AE_KHI: MSExchangeMailboxAssistants Failed Requests - Calendar Assistant_C7EB370F_1653_484d_B446_AA57B8B8E5AE_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C803B727_A78D_4ce1_A630_B0BA9C0495A7_KHI: MS Search (Exchange) has reached the allocated memory cap._C803B727_A78D_4ce1_A630_B0BA9C0495A7_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_c8bad9bc_dfad_4d6d_901b_0a344e7970e5_KHI: The database copy is experiencing an unusually high log generation checkpoint depth for a sustained period of at least 15 minutes._c8bad9bc_dfad_4d6d_901b_0a344e7970e5_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_C8D54E3F_471E_44b0_A311_B368073723A0_KHI: Calendar Connectivity (Internal) transaction failures - Failed to Retrieve HTML view._C8D54E3F_471E_44b0_A311_B368073723A0_Microsoft.Exchange.2010.ClientAccessAnonymousCalendarSharingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_CalendarConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_c9086eb9_f237_4e6a_9a9c_a62f4cc4adb0_KHI: The Microsoft Exchange Service Host service (MSExchangeServiceHost) isn't running._c9086eb9_f237_4e6a_9a9c_a62f4cc4adb0_Microsoft.Exchange.2010.CommonServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_C94C33BA_D1F7_41DF_839B_8F20C796CAB8_KHI: The Test-ECPConnectivity (External) cmdlet failed to run._C94C33BA_D1F7_41DF_839B_8F20C796CAB8_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_CB004129_56ED_4E76_88D8_C344FB67DD77_KHI: Failed to execute the Test-ActiveSyncConnectivity (Internal) diagnostic cmdlet._CB004129_56ED_4E76_88D8_C344FB67DD77_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ActiveSyncConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_cb141f89_77c9_4d5b_a744_1e4c6df45204_KHI: The Microsoft Exchange Transport service (MSExchangeTransport) isn't running._cb141f89_77c9_4d5b_a744_1e4c6df45204_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_CB86B85A_AF81_43FC_9B07_3C6FC00D3D42_KHI: Outlook Web App connectivity (External) transaction warnings._CB86B85A_AF81_43FC_9B07_3C6FC00D3D42_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_cc3fd4a7_b870_4861_9f47_24a3961918de_KHI: A mailbox on this database has been quarantined._cc3fd4a7_b870_4861_9f47_24a3961918de_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_cc4f2e1a_817c_44d9_b527_4216676b3bfd_KHI: The database copy is low on log volume space. The volume has reached warning levels._cc4f2e1a_817c_44d9_b527_4216676b3bfd_Microsoft.Exchange.2010.Mailbox.DatabaseCopyLogLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_cc976087_cb72_41ca_b100_92c5fa41ed1a_KHI: Transaction failures occurred during MAPI connectivity testing._cc976087_cb72_41ca_b100_92c5fa41ed1a_Microsoft.Exchange.2010.Mailbox.MailboxMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_MAPIConnectivity_diagnostic_cmdlet._Report_Collection_TruePublic
_CD1E0AF2_DFB7_4be8_8922_C0B8A0B6A1E0_KHI: Failed to execute TestGenericRollupHealth.ps1 for DatabaseServiceContainsDatabaseCopyMounted._CD1E0AF2_DFB7_4be8_8922_C0B8A0B6A1E0_Microsoft.Exchange.2010.Mailbox.AllDatabaseServicesSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_TestGenericRollupHealth_diagnostic_script_for_DatabaseServiceContainsDatabaseCopyMounted.TruePublic
_CF40D94B_1555_41B0_8411_D660176E4D72_KHI: The Content Filter agent couldn't be initialized because sufficient memory couldn't be allocated for an internal buffer._CF40D94B_1555_41B0_8411_D660176E4D72_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_CF45C563_69B2_4DB5_9912_722ED6F441D1_KHI: Activation of transport components failed because of an unexpected exception._CF45C563_69B2_4DB5_9912_722ED6F441D1_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_CF9BC4E8_193F_4856_97EE_0127B67410ED_KHI: MSExchangeTransport has detected a critical storage error but won't take recovery actions. The service has stopped; please investigate._CF9BC4E8_193F_4856_97EE_0127B67410ED_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D00ED0ED_D9B5_48DF_9FF7_32F1A9CC592B_NonServiceImpacting: One or more Objects properties are pointing to Active Directory deleted objects. See event log for details._D00ED0ED_D9B5_48DF_9FF7_32F1A9CC592B_Microsoft.Exchange.2010.CommonActiveDirectoryAccessMicrosoft.Exchange.2010.CommonActiveDirectoryAccess.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D0567EB5_C500_482a_BBD5_8B753736B72F_KHI: The RMS agent failed to initialize or read the configuration from Active Directory._D0567EB5_C500_482a_BBD5_8B753736B72F_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_d0705a18_3c3b_4916_b893_8c967de4b8e4_KHI: The Microsoft Exchange Credential service (MSExchangeEdgeCredential) isn't running._d0705a18_3c3b_4916_b893_8c967de4b8e4_Microsoft.Exchange.2010.EdgeTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_d071e080_b6b5_49e7_abcd_f55c57117b70_KHI: The Microsoft Exchange Replication service is not running._d071e080_b6b5_49e7_abcd_f55c57117b70_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_D0ACF215_12A6_4C23_BA24_4E828872918C_KHI: An error occurred while running the Test-ExchangeSearch diagnostic cmdlet._D0ACF215_12A6_4C23_BA24_4E828872918C_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_ExchangeSearch_cmdlet.TruePublic
_d0adb6d7_2c2f_454f_87c1_de5c474eeb23_KHI: The Microsoft Exchange Replication service wasn't able to enable the Tasks RPC listener._d0adb6d7_2c2f_454f_87c1_de5c474eeb23_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D1D0A332_8F1F_4911_8C46_0835E0E69E93_Forensic: Detected deadlock of search services._D1D0A332_8F1F_4911_8C46_0835E0E69E93_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceMicrosoft.Exchange.2010.Mailbox.ContentIndexingService.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D1EA3E07_FEAD_43BE_B610_DB9C8DEE1E92_KHI: The database has reached the maximum size. The Microsoft Exchange Information Store service is attempting to dismount the database._D1EA3E07_FEAD_43BE_B610_DB9C8DEE1E92_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D2405780_498B_47e3_B9FD_A64B80DE77B6_KHI: OABGen failed to load the OAB version 4 manifest file._D2405780_498B_47e3_B9FD_A64B80DE77B6_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D240AD5E_BC03_4A15_8F74_148E6281A554_KHI: Couldn't initialize the Content Filter agent. Check the access control lists (ACLs) on the files._D240AD5E_BC03_4A15_8F74_148E6281A554_Microsoft.Exchange.2010.CommonTransportAgentsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D27F04D5_15C1_44e8_A15C_043CD7F19BA8_KHI: IMAP4 connectivity transaction failures._D27F04D5_15C1_44e8_A15C_043CD7F19BA8_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_D2992649_D9BE_4ecf_AA79_3C864664DE9B_Forensic: MSExchangePop3: Transient Errors Rate Red>10 per min_D2992649_D9BE_4ecf_AA79_3C864664DE9B_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_D2FCB90D_426B_4A8C_AA6C_955E4B2E4916_KHI: Exchange Control Panel connectivity (Internal) transaction warnings._D2FCB90D_426B_4A8C_AA6C_955E4B2E4916_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_D3AD2DAB_AC7C_4439_AFBB_7B3B66406F26_KHI: Outbound authentication failed at the send connector. It may have failed to acquire a Kerberos ticket for the destination target name._D3AD2DAB_AC7C_4439_AFBB_7B3B66406F26_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D449D35D_6981_45ba_A526_452A8485AB0F_KHI: MSExchange OWA: Storage Transient Exception Failure Percentage Yellow>5_D449D35D_6981_45ba_A526_452A8485AB0F_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_D4E44455_1A70_48f9_8C08_82ABD21CA71F_Forensic: MSExchangeImap4: Transient Mailbox Connection Failures Rate Red>10 per min_D4E44455_1A70_48f9_8C08_82ABD21CA71F_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_d5515d9f_931d_44ab_bac9_7981c189eb2d_KHI: The Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) is not running._d5515d9f_931d_44ab_bac9_7981c189eb2d_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_D56D4628_7091_4f67_AE8F_F1DEF19A6749_KHI: The Microsoft Exchange Protected Service Host service (MSExchangeProtectedServiceHost) isn't running._D56D4628_7091_4f67_AE8F_F1DEF19A6749_Microsoft.Exchange.2010.HubTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_D571B10E_235E_4919_91AD_4AB9D8B8493C_KHI: Transport User PreLicensing and/or Server Licensing Impacted - More than 5\% of IRM messages failed prelicensing or server licensing in the last 30 minutes - Red(>5)._D571B10E_235E_4919_91AD_4AB9D8B8493C_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_D5ACA160_F52A_4984_8E93_6736DFAD683E_KHI: Search Retry queues on the server are stagnant_D5ACA160_F52A_4984_8E93_6736DFAD683E_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D5CF1004_48C7_11DF_99F9_2BAC55D89593_KHI: MSExchangePowerShellLiveIDAppPool has exceeded its committed memory limit. See event ID 701 in the application event log for more information._D5CF1004_48C7_11DF_99F9_2BAC55D89593_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D63426C3_9C0D_45e7_A31C_81345B7A8748_KHI: The Exchange Transport service was unable to start listening on the receive connector binding because an error was encountered._D63426C3_9C0D_45e7_A31C_81345B7A8748_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D652EF77_22DC_4444_8479_82DD7CCF02AF_KHI: The Outlook Web App proxy failed because no Outlook Web App virtual directory configured for Kerberos authentication could be found in the site._D652EF77_22DC_4444_8479_82DD7CCF02AF_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_d6bb1e22_e151_4993_b5f5_7328604e3741_KHI: The Exchange store can't create any more MAPI-named properties._d6bb1e22_e151_4993_b5f5_7328604e3741_Microsoft.Exchange.2010.Mailbox.MailboxOnDbCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D93C0D26_DC93_4517_844B_E8DA7AC69066_KHI: RPC could not start._D93C0D26_DC93_4517_844B_E8DA7AC69066_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D94A0FA6_4C27_4D41_9399_4E5609116F47_KHI: A file from a theme folder couldn't be parsed. Review MSExchangeOWA event 20 for the cause._D94A0FA6_4C27_4D41_9399_4E5609116F47_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_D94A863B_E682_47FD_BCFC_FA5FEFE1A0CC_KHI: The non-nullable column in the Extensible Storage Engine (ESE) can't be found in the actual database table._D94A863B_E682_47FD_BCFC_FA5FEFE1A0CC_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D9D72443_644A_4DD2_9571_015E51E2C9E8_KHI: Outlook Web App wasn't able to proxy traffic because the authentication for the connection between the two Client Access servers failed._D9D72443_644A_4DD2_9571_015E51E2C9E8_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_D9D73EBD_1B56_410a_B1FF_695CB6AF1BB2_KHI: A POP3 connectivity transaction failure occurred. The specified server isn't a Client Access server._D9D73EBD_1B56_410a_B1FF_695CB6AF1BB2_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_DA1F123E_5452_4AFC_9758_E89DFB04A255_KHI: An error occurred while the Test-ECPConnectivity (External) cmdlet was running._DA1F123E_5452_4AFC_9758_E89DFB04A255_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_DA970C69_F3FF_4420_9C5F_C38BF5238D4E_KHI: Three or more Test-MailFlow cross-premises test message responses have not been received._DA970C69_F3FF_4420_9C5F_C38BF5238D4E_Microsoft.Exchange.2010.Mailbox.CrossPremisesMailflowMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_Mailflow_CrossPremises_diagnostic_cmdlet.TruePublic
_DAD4CB4D_33CF_4B6D_97F3_DD02FC02C22B_KHI: The internal TLS certificate for this server is missing._DAD4CB4D_33CF_4B6D_97F3_DD02FC02C22B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_db0a98b4_65cc_4be7_9eb9_1e2ac9043a63_KHI: msftesql: Process Processor Time > 180 percent_db0a98b4_65cc_4be7_9eb9_1e2ac9043a63_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_db4ee2d6_db22_496a_9146_c7a9444efcb1_KHI: The Exchange store has consumed 90\% of available RPC threads._db4ee2d6_db22_496a_9146_c7a9444efcb1_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_DB921F2F_8578_413D_82B4_45F6A4CCEFF4_KHI: The streaming page read from a file failed verification because of a page checksum mismatch._DB921F2F_8578_413D_82B4_45F6A4CCEFF4_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DBAF248E_2EC9_4DE5_806D_28994B58B463_KHI: Could not read the forest GUID. The Proxy address calculation services will not be available on the local Exchange server._DBAF248E_2EC9_4DE5_806D_28994B58B463_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DC73990D_EAE1_4444_814F_36658FF7F56D_KHI: A gap in the log file sequence was detected. Restore the missing log file specified in the event description._DC73990D_EAE1_4444_814F_36658FF7F56D_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DD00B86F_9F9E_4908_850D_9B85F46340DB_KHI: Could not read the root entry in Active Directory._DD00B86F_9F9E_4908_850D_9B85F46340DB_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DD510CA1_1F41_4CD0_B4B4_0DE018B6D276_KHI: Exchange failed to retrieve the local server. It's possible that the DNS name of the server has changed._DD510CA1_1F41_4CD0_B4B4_0DE018B6D276_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_dd77cb38_b8ac_43e7_823f_98b5bdbe08bf_KHI: The database copy is very low on database volume space. The volume has reached error levels (16\% free)._dd77cb38_b8ac_43e7_823f_98b5bdbe08bf_Microsoft.Exchange.2010.Mailbox.DatabaseCopyEdbLogicalDiskSpaceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_DD81E7B7_D948_411A_B86B_1769D961577A_KHI: The Microsoft Exchange Transport Log Search Service failed to start due to an ACL setup error._DD81E7B7_D948_411A_B86B_1769D961577A_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DDD56B9F_BAA2_4595_AC8D_6CE657AF8571_KHI: The Microsoft Exchange Transport Log Search service failed because MessageTrackingLogPath was set to an invalid value._DDD56B9F_BAA2_4595_AC8D_6CE657AF8571_Microsoft.Exchange.2010.CommonTransportLogSearchSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DDE3FC3A_D5A0_4ED4_92D8_915DBBCAA4B6_KHI: The Exchange Information Store: Delivery Blocked: Low Database Space._DDE3FC3A_D5A0_4ED4_92D8_915DBBCAA4B6_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_DED8CE60_AC62_482D_BCCC_92E46E8DF9E9_KHI: Search Retry queues are stagnant_DED8CE60_AC62_482D_BCCC_92E46E8DF9E9_Microsoft.Exchange.2010.Mailbox.DatabaseSearchCopySystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_ded93f77_9f9e_4556_a724_d7f9abd4319a_KHI: The local database copy contains corruption. This problem can be corrected by reseedng the database copy. The database copy will terminate replication or dismount._ded93f77_9f9e_4556_a724_d7f9abd4319a_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_DEE64475_0E74_4215_9BFA_6271FF19F5E4_KHI: Authentication of the connection to a secure domain failed because the TLS server certificate didn't contain the name of that domain._DEE64475_0E74_4215_9BFA_6271FF19F5E4_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_dee7ed67_3f2f_4dde_87c7_099499a65236_KHI: The A/V Edge service is misconfigured or isn't operating correctly. Calls from outside the UM organization might fail._dee7ed67_3f2f_4dde_87c7_099499a65236_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_DF0FB30A_62D2_4E7A_B35C_5BF987134471_KHI: Availability Service initialization failed._DF0FB30A_62D2_4E7A_B35C_5BF987134471_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E055B0D0_C283_41EA_AA85_E1CFA456C216_KHI: The server can't achieveTransport Layer Security which the Receive connector requires for the MailFrom command to be run,_E055B0D0_C283_41EA_AA85_E1CFA456C216_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E0A971E0_69B1_4B5E_AA0C_B9297A4E8C3A_KHI: There wasn't enough disk space to complete the database operation. The Microsoft Exchange Transport service is shutting down._E0A971E0_69B1_4B5E_AA0C_B9297A4E8C3A_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E1AC23EE_CAE4_4fc7_AF22_AD49FCB980EA_KHI: Calendar Connectivity (External) transaction failures - Failed to Retrieve HTML view._E1AC23EE_CAE4_4fc7_AF22_AD49FCB980EA_Microsoft.Exchange.2010.ClientAccessAnonymousCalendarSharingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_CalendarConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_E1D8BF61_E8BE_46f8_BAE0_5FD2AA896110_Forensic: MSExchangeImap4: Transient Storage Errors Rate Red>10 per min_E1D8BF61_E8BE_46f8_BAE0_5FD2AA896110_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E21B893F_5589_411D_B4CA_FA91B6F0031A_KHI: Database page read failed verification because of no page data. This results in ESE errors -1018 and -1019._E21B893F_5589_411D_B4CA_FA91B6F0031A_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E3299B7D_F9E6_4A82_B425_6CA019D6A06E_KHI: An EdgeSync process ended because the Hub Transport server couldn't find a matching direct trust certificate on the Edge Transport server._E3299B7D_F9E6_4A82_B425_6CA019D6A06E_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_e38e2187_c32f_430d_bc4b_409c69447603_KHI: The IIS Admin Service (IISAdmin) isn't running._e38e2187_c32f_430d_bc4b_409c69447603_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_E39EDD06_22ED_42b6_9BB9_EB5AB6DDE39F_Forensic: MSExchangeImap4: Mailbox Offline Errors Rate Red>10 per min_E39EDD06_22ED_42b6_9BB9_EB5AB6DDE39F_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E3D0A754_DD22_480a_93A0_CDBF6C8DCAC4_KHI: Transport Policy Encryption Impacted - More than 5\% of IRM messages failing Transport Policy Encryption in the last 30 minutes - Red(>5)._E3D0A754_DD22_480a_93A0_CDBF6C8DCAC4_Microsoft.Exchange.2010.HubTransportAgentsMessagingPoliciesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ThresholdMonitorTypeTruePublic
_E420415D_4BE2_47EE_BD0C_06443FF345D5_KHI: The database engine log disk is full._E420415D_4BE2_47EE_BD0C_06443FF345D5_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E4DA6733_A889_42b3_B5C0_A8B50A949836_KHI: High percentage of Transport Throttling Service Client requests are failing - sustained for 30 minutes - Red(>10)_E4DA6733_A889_42b3_B5C0_A8B50A949836_Microsoft.Exchange.2010.CommonTransportThrottlingClientSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_e549edda_29f5_4d5e_b2f1_d0438f754577_KHI: Hard I/O error will dismount or terminate replication on a database copy._e549edda_29f5_4d5e_b2f1_d0438f754577_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_E586AF17_1F24_4D1C_9060_71FDCFDD31CC_KHI: Microsoft Exchange couldn't read the server configuration. The Microsoft Exchange Credential service will be stopped._E586AF17_1F24_4D1C_9060_71FDCFDD31CC_Microsoft.Exchange.2010.EdgeTransportMessageSecuritySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_E5DE37F6_2628_40ac_B151_EADA696299DC_Forensic: MSExchangeImap4: Permanent Active Directory Errors Rate Red>10 per min_E5DE37F6_2628_40ac_B151_EADA696299DC_Microsoft.Exchange.2010.ClientAccessImap4Microsoft.Exchange.2010.ClientAccessImap4.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E5F99D06_8915_4544_96BE_D30BD9C5312D_KHI: A secure connection to a domain secure domain could not be established because the validation of the TLS server certificate failed._E5F99D06_8915_4544_96BE_D30BD9C5312D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_e615a354_1df7_4d34_87bd_0f6706aad86f_KHI: The Exchange information store: RPC Averaged Latency - sustained for 5 minutes - Red (>70 msec)._e615a354_1df7_4d34_87bd_0f6706aad86f_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E628287D_B641_4975_9552_E53B7EBD2B49_KHI: Troubleshooter failed._E628287D_B641_4975_9552_E53B7EBD2B49_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_E665941A_961D_4825_AF6B_7DC3D2A37F47_KHI: Microsoft Exchange couldn't read the server configuration because the directory is unavailable._E665941A_961D_4825_AF6B_7DC3D2A37F47_Microsoft.Exchange.2010.EdgeTransportMessageSecuritySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_e6cd2d86_0b00_4aa4_91ae_170a1a70fa76_KHI: The Exchange information store: RPC Averaged Latency - sustained for 5 minutes - Yellow (>50 msec)._e6cd2d86_0b00_4aa4_91ae_170a1a70fa76_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStatePerformanceHealthFalse0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E6D4C7DC_6BA9_4D33_9FAB_3F37E88A987D_NonServiceImpacting: The STARTTLS certificate will expire soon. The certificate must be renewed to preserve mail flow._E6D4C7DC_6BA9_4D33_9FAB_3F37E88A987D_Microsoft.Exchange.2010.CommonTransportMicrosoft.Exchange.2010.CommonTransport.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_e6e19525_336f_4ea0_8a97_7b9d58085b42_KHI: EdgeSync MSERV synchronization isn't configured._e6e19525_336f_4ea0_8a97_7b9d58085b42_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_TruePublic
_E7C95109_6420_43ad_9B27_3C96A024F2AB_KHI: MSExchangeActiveSync: Requests Queued Red>500_E7C95109_6420_43ad_9B27_3C96A024F2AB_Microsoft.Exchange.2010.ClientAccessActiveSyncSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_E83261DC_B7CD_4D33_A31D_999C8DF6C5F4_NonServiceImpacting: File Distribution Service: Failed to read the security descriptor from Active Directory for the offline address book._E83261DC_B7CD_4D33_A31D_999C8DF6C5F4_Microsoft.Exchange.2010.CommonFileDistributionServiceMicrosoft.Exchange.2010.CommonFileDistributionService.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_EA0F6944_6F1F_4ec4_8CA8_F02DE475394C_KHI: Cross-Forest MailTips isn't responding to requests within SLA - Red (>10s) -_EA0F6944_6F1F_4ec4_8CA8_F02DE475394C_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_EAF0B308_03BF_497C_A004_B36C14F2DE5D_KHI: The process to start transport agents failed. The transport service will be stopped._EAF0B308_03BF_497C_A004_B36C14F2DE5D_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_EB0316EF_0C4D_4889_9215_F433EA548925_KHI: Database engine is unable to replay log file sequence due to fatal error. No further updates to the database are possible._EB0316EF_0C4D_4889_9215_F433EA548925_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_EB0EF917_E93D_42a0_81A5_80E5A778353E_Forensic: Database copy encountered a serious I/O error (lost flush) that may have affected all copies of the database._EB0EF917_E93D_42a0_81A5_80E5A778353E_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionMicrosoft.Exchange.2010.Mailbox.DatabaseCopyCorruption.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_eb425c63_bf0a_4aac_bf3d_aef5149c1a8f_KHI: The database copy is experiencing high disk latency, which is likely caused by a defective disk._eb425c63_bf0a_4aac_bf3d_aef5149c1a8f_Microsoft.Exchange.2010.Mailbox.DatabaseCopyPerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_EC266336_4C01_4443_88E4_96BC9C54B8FD_Forensic: MSExchangePop3: Transient Storage Errors Rate Red>10 per min_EC266336_4C01_4443_88E4_96BC9C54B8FD_Microsoft.Exchange.2010.ClientAccessPop3Microsoft.Exchange.2010.ClientAccessPop3.ForensicMonitorsContainerAvailabilityHealthPerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_EC2E1639_05E5_4DE3_9ECB_A6D2288956B4_NonServiceImpacting: Your Autodiscover service configuration isn't secure. To fix this problem, disable anonymous access on the Autodiscover virtual directory._EC2E1639_05E5_4DE3_9ECB_A6D2288956B4_Microsoft.Exchange.2010.ClientAccessAutoDiscoveryMicrosoft.Exchange.2010.ClientAccessAutoDiscovery.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_EC54A4DF_B89C_41d2_8B81_7377D97FB948_KHI: MSExchange OWA: Storage Permanent Exception Failure Percentage Yellow>5_EC54A4DF_B89C_41d2_8B81_7377D97FB948_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_EC97C8B4_BD35_4E96_8161_1DCA85426019_KHI: The TLS certificate used for SMTP authentication by Exchange couldn't be read from Active Directory._EC97C8B4_BD35_4E96_8161_1DCA85426019_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_ED498CBF_EA09_43B5_A937_6BD4A3D694DE_KHI: Exchange Control Panel connectivity (External) transaction failure - Client Access server configuration check failure._ED498CBF_EA09_43B5_A937_6BD4A3D694DE_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_EDF99431_A386_4CCD_9EFC_C79D8975B101_KHI: An E-mail Address Policy has an invalid Filter Rule (purportedSearch). New users, contacts and groups will not receive email._EDF99431_A386_4CCD_9EFC_C79D8975B101_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_EE1390F5_BEE4_438F_A768_D6252E07B4EA_KHI: The Outlook Web App proxy failed because of a version mismatch between the source and destination servers._EE1390F5_BEE4_438F_A768_D6252E07B4EA_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_eed681c4_631d_44cc_80a8_b3091c9d681e_KHI: The Microsoft Exchange ADAM service (ADAM_MSExchange) isn't running._eed681c4_631d_44cc_80a8_b3091c9d681e_Microsoft.Exchange.2010.EdgeTransportServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_EF0B8770_987C_4688_8400_039A4ED3CBFC_KHI: Frequent EAS service restarts. Check Application log for crash events and more information._EF0B8770_987C_4688_8400_039A4ED3CBFC_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulRepeatedWindowsEventTimerMonitorTypeTruePublic
_ef4a8515_1cc0_48a9_aa12_92ba059a6eae_KHI: The database copy is not mounted on the local server. Another database copy may be mounted on a different server._ef4a8515_1cc0_48a9_aa12_92ba059a6eae_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMountedSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_EF51D339_22C5_49b3_8B6B_25002BE31D4A_KHI: Retry Mailbox Delivery Queue Length - sustained for 90 minutes - Red(>1) - Hub Transport._EF51D339_22C5_49b3_8B6B_25002BE31D4A_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_ef9f008b_9bb9_4908_b306_47840c754b54_KHI: Couldn't run the Test-EdgeSyncMserv diagnostic cmdlet._ef9f008b_9bb9_4908_b306_47840c754b54_Microsoft.Exchange.2010.HubTransportEdgeSyncSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_EdgeSyncMserv_diagnostic_cmdlet._Report_Collection_TruePublic
_EFE169D2_A97A_4FA9_B99A_AF2A15A4E43E_KHI: An Address List has an invalid Filter Rule (purportedSearch)._EFE169D2_A97A_4FA9_B99A_AF2A15A4E43E_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F0089B10_32F0_405D_AC3F_7AB2CF3B6980_KHI: Failed to start the Microsoft Exchange System Attendant service; review related events for more information._F0089B10_32F0_405D_AC3F_7AB2CF3B6980_Microsoft.Exchange.2010.MailboxSystemAttendantSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F04C4F01_5F34_49ed_9ABC_89BA31F76DEF_KHI: Calendar Connectivity (Internal) transaction failures - Failed to Retrieve ICS file._F04C4F01_5F34_49ed_9ABC_89BA31F76DEF_Microsoft.Exchange.2010.ClientAccessAnonymousCalendarSharingSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_CalendarConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_F05F9B1E_1FF6_4A96_B133_B882F169FBC0_KHI: Remote PowerShell connectivity (Internal) transaction failure - Server configuration check failure._F05F9B1E_1FF6_4A96_B133_B882F169FBC0_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_f083c9f7_7cf4_4714_a9ef_17da49d093e0_KHI: A significant portion of the database buffer cache has been written out to the system paging file. This may result in severe performance degradation._f083c9f7_7cf4_4714_a9ef_17da49d093e0_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F0A62E02_3CDC_4fb9_B5B6_8C51F4123525_KHI: Client Access: OAB is getting too large Yellow>858783744 bytes (819 MB)_F0A62E02_3CDC_4fb9_B5B6_8C51F4123525_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_F0A79980_0D69_4A9B_8B14_3D07A5F0827F_KHI: Exchange Control Panel connectivity (Internal) transaction failures._F0A79980_0D69_4A9B_8B14_3D07A5F0827F_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_F0D0B8CE_11C4_41B2_961A_5A57AEEF62A2_KHI: The Outlook Web App proxy failed because of SSL configuration issues on the destination Outlook Web App virtual directory._F0D0B8CE_11C4_41B2_961A_5A57AEEF62A2_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F138780F_564B_47e7_B2F7_F0C971768AA9_Forensic: Failed to remove a log file for database. Either the file is in use or the service has insufficient permissions._F138780F_564B_47e7_B2F7_F0C971768AA9_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMicrosoft.Exchange.2010.Mailbox.DatabaseCopy.ForensicMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueCorrelation.EventLogManualReset2StateMonitorTypeTruePublic
_F1796B63_2FDA_4822_A6C6_1FBA8B8134D5_NonServiceImpacting: WebServices connectivity (Internal) transaction failure - The credentials can't be used to test Web Services._F1796B63_2FDA_4822_A6C6_1FBA8B8134D5_Microsoft.Exchange.2010.ClientAccessWebServicesMicrosoft.Exchange.2010.ClientAccessWebServices.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_WebServicesConnectivity_Internal_diagnostic_cmdlet.TruePublic
_F1C085CE_C9A3_46d7_AA71_F25CB008278F_KHI: The Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) is not running._F1C085CE_C9A3_46d7_AA71_F25CB008278F_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_F1C987AB_6AD5_426b_9100_88A16DBEF091_KHI: An IMAP4 connectivity transaction failure occurred. The mailbox isn't enabled for the user._F1C987AB_6AD5_426b_9100_88A16DBEF091_Microsoft.Exchange.2010.ClientAccessImap4System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_IMAPConnectivity_diagnostic_cmdlet.TruePublic
_F1CDCFE1_D2B9_4DBE_B4C9_144067954938_KHI: Outlook Web App wasn't able to register for setting change notification for one of its virtual directories._F1CDCFE1_D2B9_4DBE_B4C9_144067954938_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_F1D609EA_821A_4f41_81ED_C320EB472706_KHI: MSExchangePop3: Average Command Processing Time Red>60s_F1D609EA_821A_4f41_81ED_C320EB472706_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_f293dc1d_eb1b_40cd_9363_adecc8ac82b0_KHI: At startup, the Microsoft Exchange Replication service couldn't enable the Tasks RPC listener._f293dc1d_eb1b_40cd_9363_adecc8ac82b0_Microsoft.Exchange.2010.Mailbox.ReplayServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_F35E938A_6DC6_4ece_9A2F_200AFD1575E0_KHI: Transport Categorizer Jobs are unavailable - percentage of available categorizer jobs - Red(<90)._F35E938A_6DC6_4ece_9A2F_200AFD1575E0_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_f39dc3a7_a897_4d31_abdb_9cd53c88e16c_KHI: The Exchange store terminated due to a stack overflow._f39dc3a7_a897_4d31_abdb_9cd53c88e16c_Microsoft.Exchange.2010.Mailbox.InformationStorePerformanceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_f39f4de7_595f_40c1_bfb7_005f2fc2262f_KHI: The World Wide Web Publishing Service (W3Svc) isn't running._f39f4de7_595f_40c1_bfb7_005f2fc2262f_Microsoft.Exchange.2010.CommonInternalRoleServicesSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_F470EE33_2566_4AFD_9D6E_47CA384DF11A_NonServiceImpacting: An Exchange Control Panel connectivity (Internal) transaction failure occurred. Test-ECPConnectivity must be run on an Exchange server._F470EE33_2566_4AFD_9D6E_47CA384DF11A_Microsoft.Exchange.2010.ClientAccessExchangeControlPanelMicrosoft.Exchange.2010.ClientAccessExchangeControlPanel.NonServiceImpactingMonitorsContainerAvailabilityHealthAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_EcpConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_f4b40d85_3c73_438f_9175_b2b26c5d783e_KHI: Couldn't load the Exchange store because the distinguished name (DN) of the message database doesn't match the DN of directory._f4b40d85_3c73_438f_9175_b2b26c5d783e_Microsoft.Exchange.2010.Mailbox.DatabaseCopyMountedSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_f4c07953_18fa_40b2_a4f9_589645708b65_KHI: The Microsoft Exchange IMAP4 service (MSExchangeIMAP4) isn't running._f4c07953_18fa_40b2_a4f9_589645708b65_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_F4DCDFFA_0CE7_11DB_9607_00E08161165F_KHI: Exchange was unable to execute the diagnostic cmdlet to probe the POP3 connectivity state._F4DCDFFA_0CE7_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_F4E192B7_A353_4941_A1E6_0206EA234BEA_KHI: Events are not being Processed for a database._F4E192B7_A353_4941_A1E6_0206EA234BEA_Microsoft.Exchange.2010.Mailbox.AssistantsSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_AssistantHealth_diagnostic_cmdlet.TruePublic
_F50A719B_6E5A_4bf5_B5C3_61619CF658A4_KHI: Database copy isn't keeping up with the changes on the active database copy and has failed._F50A719B_6E5A_4bf5_B5C3_61619CF658A4_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_f517984d_9ae2_4849_bb08_69d54c55acf3_KHI: The Microsoft Exchange Search Indexer service (MSExchangeSearch) is not running._f517984d_9ae2_4849_bb08_69d54c55acf3_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_F544640E_0DA2_42B4_8C3D_7C7842E9BCA7_KHI: A folder couldn't be created to cache the current Outlook Web App process. Other processes may be using the same directory._F544640E_0DA2_42B4_8C3D_7C7842E9BCA7_Microsoft.Exchange.2010.ClientAccessOutlookWebAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_F55216AB_C56B_4e97_99CD_E9B6B048BBAF_KHI: A POP3 connectivity transaction failure occurred. The mailbox isn't enabled for the user._F55216AB_C56B_4e97_99CD_E9B6B048BBAF_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_F658E443_7DF4_43ff_9FE2_BAC22EE520F0_KHI: A POP3 connectivity transaction failure occurred. The mailbox database wasn't found._F658E443_7DF4_43ff_9FE2_BAC22EE520F0_Microsoft.Exchange.2010.ClientAccessPop3System.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_f670cca0_2bd4_4d1c_80b6_8deac578dfa0_KHI: The Exchange Information Store cannot contact Active Directory._f670cca0_2bd4_4d1c_80b6_8deac578dfa0_Microsoft.Exchange.2010.CommonActiveDirectoryAccessSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsRepeatedEventsMonitorTypeTruePublic
_F688B583_2521_4e0f_B7CA_2DADC610F09A_KHI: Too many failed message tracking requests via EWS - Yellow(>3\%) -_F688B583_2521_4e0f_B7CA_2DADC610F09A_Microsoft.Exchange.2010.ClientAccessInformationWorkerSystem.Health.AvailabilityStatePerformanceHealthTrue0FalseTrueCorrelation.Performance.ConsecutiveSamplesThresholdTruePublic
_f6bb6af4_ed3b_4efc_b4c7_7591715351a2_KHI: CI Troubleshooter has been disabled_f6bb6af4_ed3b_4efc_b4c7_7591715351a2_Microsoft.Exchange.2010.Mailbox.ContentIndexingServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_F766F6F5_E139_4876_93A6_CF92D6F7BE68_KHI: The database engine is rejecting update operations because of low free disk space on the designated disk. Free disk space immediately._F766F6F5_E139_4876_93A6_CF92D6F7BE68_Microsoft.Exchange.2010.CommonExtensibleStorageEngineSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F7D79410_7010_41BE_BDDF_03EC9256EB0B_KHI: The SmtpReceive process failed to start listening on a configured binding because IPv6 is not enabled._F7D79410_7010_41BE_BDDF_03EC9256EB0B_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F84B2442_7F0B_4277_A64F_FC767FB32779_KHI: Perimeter queue level is above error threshold._F84B2442_7F0B_4277_A64F_FC767FB32779_Microsoft.Exchange.2010.HubTransportQueuesSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Get_PerimeterQueueInfo_diagnostic_cmdlet_for_FOPE_Inbound_queues.TruePublic
_F84B75A0_40BE_456a_9B4C_18DAC4713C21_KHI: A certificate used for federation has expired._F84B75A0_40BE_456a_9B4C_18DAC4713C21_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_F92E5CFA_7C6A_4dc5_9C0D_A8312BD394B6_KHI: The Microsoft Exchange Replication service encountered an unexpected ESE error._F92E5CFA_7C6A_4dc5_9C0D_A8312BD394B6_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_F953F28C_F63E_4539_A4B5_02072902A8DF_KHI: UM connectivity (Local Voice) transaction failure._F953F28C_F63E_4539_A4B5_02072902A8DF_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_FA178B04_F2C2_4B17_8CEA_505F3EF195D3_KHI: An Outlook Web App connectivity (External) transaction failure occurred. The test credentials can't be used to test Outlook Web App._FA178B04_F2C2_4B17_8CEA_505F3EF195D3_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_OwaConnectivity_External_diagnostic_cmdlet._Report_Collection_TruePublic
_fac565f5_0c85_4f8a_b616_703de922c630_KHI: The Microsoft Exchange Protected Service Host service (MSExchangeProtectedServiceHost) isn't running._fac565f5_0c85_4f8a_b616_703de922c630_Microsoft.Exchange.2010.ClientAccessServiceMonitoringSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulServiceEventMonitorTypeTruePublic
_FBA001F6_0AD9_4856_AC48_415FCC8EB725_KHI: Exceeded the supported mount limit of local database copies._FBA001F6_0AD9_4856_AC48_415FCC8EB725_Microsoft.Exchange.2010.Mailbox.DatabaseCopySystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_FE0B82BA_A133_43ef_8C47_E7A09CBAB427_KHI: The Mserv lookup resulted in the same partner ID as the current site. It's possible that a provisioning error occurred._FE0B82BA_A133_43ef_8C47_E7A09CBAB427_Microsoft.Exchange.2010.UnifiedMessaging.Telephony.InboundSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventTimerMonitorTypeTruePublic
_FE891CAD_6EE7_4E7C_A862_FFF08403AAD9_KHI: UM Connectivity (Local Voice) transaction failure - Active Directory error encountered._FE891CAD_6EE7_4E7C_A862_FFF08403AAD9_Microsoft.Exchange.2010.UnifiedMessaging.Availability.ServiceSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulEventUnitMonitorType.Execute_Test_UMConnectivity_Local_Voice_diagnostic_cmdlet._Report_Collection_TruePublic
_FED191CC_0CE7_11DB_9607_00E08161165F_KHI: POP3 connectivity couldn't be tested._FED191CC_0CE7_11DB_9607_00E08161165F_Microsoft.Exchange.2010.ClientAccessTestConfigSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_POPConnectivity_diagnostic_cmdlet.TruePublic
_ff27c57f_187b_4a0d_adba_3588b2fbb311_KHI: There is a configuration problem on a database copy, or a file or directory is missing due to a storage failure._ff27c57f_187b_4a0d_adba_3588b2fbb311_Microsoft.Exchange.2010.Mailbox.DatabaseCopyCorruptionSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueCorrelation.StatefulWindowsEventMonitorTypeTruePublic
_FF62662A_9F83_43E9_A684_D386526AFBB6_KHI: Remote PowerShell connectivity (Internal) failures._FF62662A_9F83_43E9_A684_D386526AFBB6_Microsoft.Exchange.2010.CommonRemotePowerShellSystem.Health.AvailabilityStateAvailabilityHealthTrue0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_PowerShellConnectivity_Internal_diagnostic_cmdlet._Report_Collection_TruePublic
_FFDC58E7_3A94_49CA_8B09_A433DBB98100_KHI: The Test-SmtpConnectivity cmdlet failed to run._FFDC58E7_3A94_49CA_8B09_A433DBB98100_Microsoft.Exchange.2010.CommonTransportSystem.Health.AvailabilityStateAvailabilityHealthFalse0FalseTrueScriptInstanceStatefulRepeatedEventsUnitMonitorType.Execute_Test_SmtpConnectivity_diagnostic_cmdlet.TruePublic