Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4115 Source: MSExchangeIMC

The message from the spool file <file name> seems to be looping through the routing extension for the Internet Mail Service. Please check that the routing DLL is configured properly.
This problem cleared up for me once I stopped rerouting incoming SMTP mail through the Internet Mail Service.
This happened when I applied service pack 4 to 5.5 running service park 3. I had to change the file version in IMS to correct it and I haven't been able to correct the problem in the MS Mail Connector.
This behavior occurs because Internet Mail Service is connecting to itself in an attempt to deliver the message. See ME260247 for more information.
See the links below for suggestions on how to troubleshoot this event. Also, suggested on a newsgroup post: "Turn on the SMTP Protocol Log category of Diagnostics Logging on the IMS. Set the level to "Maximum". Stop and restart the IMS. Wait for the 4115 to show up, then stop the IMS, turn off the SMTP Protocol Log. Now have a look through the log files for the "too many hops" line and work UP the file until you see the RCPT TO header. That'll tell you where the message was going. From there it should be easy to figure out what's happening."

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.