Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2152 Source: MSExchangeMTA

A fatal database error occurred, the database recovery operation was not successful and manual correction will be required. Details can be found in the file: C:\exchsrvr\mtadata\.\MTACHECK.OUT\MTACHECK.LOG. Please contact Microsoft Technical Support. [DB Server MAIN BASE 1 14] (16)
This issue may occur if incorrect values exist for the location of the MTA database path in the registry. See ME324026 for more details.

As per Microsoft: "The Microsoft Exchange Server disk may be full or a disk error may have occurred. The message transfer agent (MTA) service will stop if the disk is full". See MSEX2K3DB for more details.
Even though the article ME249359 applies to Exchange 2000, it fixed my problem for Exchange 5.5.
As per Microsoft: "The MTA is attempting to perform an online MTACHECK during startup, and an existing Mtacheck.log file located in the \Exchsrvr\Mtadata\Mtacheck.out directory may be corrupt. Additionally, the MTA may fail to start if the Mtacheck.log file is marked as read-only. This flag should never be set by the MTA itself. ". As per ME169918 this problem has not been fixed yet.
In my case, it turns out that \mtadata\Db000001.dat was corrupt. Copy that file from the CD, make sure Read Only is turned off, and run mtacheck.exe.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.