Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4117 Source: MSExchangeIMC

Source
Level
Description
An error was returned from the messaging software the Internet Mail Service uses to process messages on the Microsoft Exchange Server. As a result, the message in spool file <spool file name> failed to be delivered. The message has been moved to the IMCDATA\IN\ARCHIVE directory.
Comments
 
Microsoft article ME252624 mentions this event's appearance in a specific situation.
To resolve this problem, obtain the latest service pack for Exchange Server version 5.5. See ME126497, ME190084, ME169686, ME192186, and ME230250 for more details.
See ME192583 and ME246051. In my case this event occurred with Event: 12004, and 4116, Source: MSExchangeIMC.
This occurs when a bad message is trying to be delivered from the IMCDATA/IN queue to the store. See ME169223.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...