Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2091 Source: MSExchangeISPublic

Level
Description
A message deliver to public folder store "First Storage Group\Public Folder Store (<server name>)" with message class REPORT.IPM.NOTE.NDR is being dropped.
Comments
 
MSEX2KDB says that if a user sends mail to the address of the public information store, the information store drops the message and SMTP sends an NDR (non-delivery receipt) and this event is recorded. No further action is required.
I was getting this error while replicating public folders between Exchange 2007 servers. I turned up diagnostics logging and identified which replication message was causing the problem. I then created a dummy account in a store configured to open the source server public folder store and compared the folder in question to the one on the target server, paying particular attention to the messages cited in the log entry. 12 messages were missing from the target server, of those 4 were corrupt. I deleted the corrupt messages, updated content and replication worked normally.
ME960993 describes a situation when this event is recorded if one of the posted messages of the same replication message includes uncompressed Rich Text Format (RTF) body. A hotfix is available for Exchange 2003.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...