Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The message with ID <message id>, P1 From <sender name>, Subject <subject> from remote host <host name> was Rejected/Deleted by the Intelligent Message Filter.
|English: Request a translation of the event description in plain English.|
As per Microsoft: "Intelligent Message Filter writes this event when it rejects or deletes a message at the gateway.
This event is recorded only when the logging level is set to medium or maximum for the SMTP Protocol category of the MSExchangeTranport service. To set the logging level, use the Diagnostic Logging tab of the Exchange server properties". See "Monitoring and Troubleshooting Intelligent Message Filter" for more details.
|Private comment: Subscribers only. See example of private comment|
|Links: Monitoring and Troubleshooting Intelligent Message Filter|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated