Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: MSExchangeIS Mailbox Store|
Starting cleanup of deleted mailboxes that are past the retention date on database First Storage Group\Mailbox Store (<server name>). For more information, click http://www.microsoft.com/contentredirect.asp.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Microsoft Exchange Information Store service?
By default, MS Exchange keeps the deleted mailboxes for 30 days. Once these time limit is passing, the deleted mailboxes are purged. This can be performed also manually.
When you delete a Mailbox in Exchange 2000 it is not removed immediately. It is stored for 30 days and marked for retention. This means you can get the mailbox back should you need to. Exchange will periodically try to clean out all the mailboxes marked for deletion and log 2 events in the Event Log which are 9531 and 9535. See ME274343 for more info.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated