Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 10028 Source: MSExchangeIS

Mapi session "/o=Messaging/ou=org_name/cn=Recipients/cn=user_name" exceeded half of the maximum of 32 objects of type "session".
cording to ME842022, this issue may occur if the following conditions are true:
- You have installed Microsoft Exchange Server 2003 Service Pack 1 (SP1) on the Exchange Server computer.
- A program that is running on a client computer opens many MAPI sessions to the Exchange Server computer. The number of MAPI sessions is larger than the permitted limit.
- You are using Microsoft Office Outlook 2007, and you add a large additional mailbox to your profile (for example, this issue may occur if the additional mailbox contains more than one thousand folders.)

See the article for the suggested resolution.

Another instance of this type of problem is described in ME980049:  This issue occurs because the Exchange 2010 Store limits the number of non-MAPI sessions that other services generate, such as IMAP, POP, Outlook Web Access, Microsoft Exchange ActiveSync (EAS), or Exchange Web Services (EWS). By default, sessions per user are limited to 32, and service sessions per user are limited to 16.
To resolve this issue, first determine whether this situation is caused by a different issue. If this is not the case, then increase the limit that your organization requires for non-MAPI sessions. See the article for details on how to do this.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.