Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Mailbox|
The table is closed. Type: <type>
Last access: <time>
Session ID: <session ID>
Table ID: <table ID>
Database "First Storage Group\Mailbox Store (<server name>)".
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
"This is actually a diagnostic message that is not in fact an error per se. Exchange includes a number of diagnostic logging functions, including diagnostics for internal caching. Details on the Table Cache are hard to come by, but it appears to be a cache of memory in Exchange that's used for caching the results of specific data tables. The diagnostic message in question refers to actions involving the cache itself.
Since this level of diagnostic logging is useful only when heavy-duty debugging is being performed, it should not be left on all the time. The log may get flooded with these "errors, " which are not in fact errors, and may crowd out other, more important messages. By default these diagnostic logging actions are disabled. Some more information on diagnostic logging is available in the Exchange online documentation, at exchsvrdocsHTMXMTAA004.htm in your Exchange installation.
To turn off this level of diagnostic logging, open the Exchange Administration program, then open the Servers container, select the name of your server and hit Alt-Enter to bring up its properties page. Under the Diagnostic Logging tab, expand MSExchangeIS and select System. Look for Table Cache and set it to None." See W2K Tips link below.
|Private comment: Subscribers only. See example of private comment|
|Links: W2K Tips|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated