Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 208 Source: MSExchangeMTA

The default latest delivery time for message <message ID> has expired (<value> minutes after submission). A non-delivery report has been generated with reason code <error code> and diagnostic code <error code>. [<value> <value> <value> <value>](14).
As per Microsoft: "If a latest delivery time is not specified, a default is assumed based on the priority of the message or report: 4 hours for urgent, 24 hours for normal, and 36 hours for non-urgent. This timer has expired and the message is not delivered". See MSEX2KDB for more information about this problem.
See ME178539 on how to adjust message timeouts for the Exchange MTA.
Verify that the date and time settings are set appropriately for each server and computer involved in message submission and delivery. See ME169715. For description of MTA diagnostics logging options see ME153188.

See also the "MTA Troubleshooting Guide" link.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.