SCOM+Exchange2010+monitoring+collecting mail flow logs

Hi, I'm looking for the solution for :
SCOM+Exchange2010+monitoring+collecting mail flow logs
is it possible??
thanks
Paul

http://mrmapi.com/2012/11/06/monitoring-exchange-2010-sp2-with-scom-2012/
http://raymondleo.wordpress.com/2013/04/11/get-exchange-2010-management-pack-installed-and-working-on-scom-2012/

Similar Messages

Exchange Server 2003/2010 Coexistence Mail-flow Issues

I've installed Exchange 2010 in a 2003 coexistence scenario.
2010 was deployed with CAS,HUB, and Mailbox roles.
The installation went through smoothly, and the default RGC was created.
On the 2010 Server, when I create a new users with mailbox, that user is no able to send or receive mail from anywhere.
2010 user to 2010 user does not work
2003 user to 2010 user does not work
Mail delivery between 2003 users works fine.
The RGC message queue in ESM 2003 shows that the messages are queued and keep retrying.
I have deleted the RGC twice and created new ones, I have un-installed the HUB and CAS roles and re-installed them, and I have also re-run setup /preparead and setup /preparelegacyexchangepermissions
I'm not able to make any sense of the message tracking on the 2010 side. It just shows a bunch of entries:
EventID: NOTIFYMAPI
Source: STOREDRIV
When I use the best practices analyzer to test mailflow to a 2010 user from the outside, the test comes back with a pass even though the message itself isn't delivered to the specified mailbox.
There is no smart host defined on the default SMTP virtual server on 2003.
There is no SMTP Send Connector for External or Internal mail configured on 2003 besides the 2010 RGC
Any ideas?
Here is the mail flow analyzer result:
Testing inbound SMTP mail flow for domain '[email protected]'.
 Inbound SMTP mail flow was verified successfully.
 Additional Details
Elapsed Time: 3437 ms.
 Test Steps
 Attempting to retrieve DNS MX records for domain 'test.com'.
 One or more MX records were successfully retrieved from DNS.
 Additional Details
MX Records Host mail.test.com, Preference 0
, Host test.com, Preference 10
Elapsed Time: 110 ms.
 Testing Mail Exchanger mail.test.com.
 This Mail Exchanger was tested successfully.
 Additional Details
 Test Steps
 Attempting to resolve the host name mail.test.com in DNS.
 The host name resolved successfully.
 Additional Details
 Testing TCP port 25 on host mail.test.com to ensure it's listening and open.
 The port was opened successfully.
 Additional Details
Banner received: 220 EX2K3w2K3.test.net Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at Wed, 5 Feb 2014 14:40:44 -0500
Elapsed Time: 368 ms.
 Analyzing SMTP Capabilities for server mail.test.com:25
 SMTP Capabilities were analyzed successfuly.
 Additional Details
 Attempting to send a test email message to [email protected] using MX mail.test.com.
 The test email message was delivered successfully.
 Additional Details
Elapsed Time: 621 ms.
 Testing the MX mail.test.com for open relay by trying to relay to user [email protected].
 The Open Relay test passed. This MX isn't an open relay.
 Additional Details
 Testing Mail Exchanger test.com.
 This Mail Exchanger was tested successfully.
 Additional Details
 Test Steps
 Attempting to resolve the host name test.com in DNS.
 The host name resolved successfully.
 Additional Details
 Testing TCP port 25 on host test.com to ensure it's listening and open.
 The port was opened successfully.
 Additional Details
 Analyzing SMTP Capabilities for server test.com:25
 SMTP Capabilities were analyzed successfuly.
 Additional Details
 Attempting to send a test email message to [email protected] using MX test.com.
 The test email message was delivered successfully.
 Additional Details
 Testing the MX test.com for open relay by trying to relay to user [email protected].
 The Open Relay test passed. This MX isn't an open relay.
 Additional Details

No duplicate security groups. I did notice Exchange 2010 is not in the Exchange Domain Servers group, but 2k3 is. Not sure if that matters.
In the Application event log I'm seeing this error a lot.
Log Name: Application
Source: MSExchangeMailSubmission
Date: 05/02/2014 3:02:31 PM
Event ID: 1009
Task Category: MSExchangeMailSubmission
Level: Error
Keywords: Classic
User: N/A
Computer: ex2010w2k8.test.net
Description:
The Microsoft Exchange Mail Submission service is currently unable to contact any Hub Transport servers in the local Active Directory site. The servers may be too busy to accept new connections at this time.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeMailSubmission" />
<EventID Qualifiers="49156">1009</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-02-05T20:02:31.000000000Z" />
<EventRecordID>6530</EventRecordID>
<Channel>Application</Channel>
<Computer>ex2010w2k8.test.net</Computer>
<Security />
</System>
<EventData>
<Data>HubTransport</Data>
</EventData>
</Event>
As long as you cannot send email between ex2010 users this has nothing to do with connectors/smtp config..
I had the same issue one year ago and solved adding both sevrers to old/new exchange sevrers security groups.
Looks like for some missing security entry (not sure why) mailbox is unable to conact HUB (MSExchangeMailSubmission) I expect you seing items stuck in draft for owa (outbok for outlook)
I saw in some blogs similar cases solved by setting static DNS servers for HUB severs config.
Yes that is similar to what I'm experiencing.
When using the Outlook client with a 2010 mailbox the mail leaves the outbox fine. When using OWA new messages just get saved as drafts when I try to send them.
I will try your suggestions. I see two groups. Exchange Domain Servers, and Exchange Enterprise Servers of which Exchange Domain Servers is a member.

Is it possible to monitor server standard out logs with WLDF

Does anyone know if there is a way to configuring a monitor to watch a managed server standard out log instead of the managed server's server log? I know you can redirect the standard out log to the server log, but it looks like you can't redirect debug or info level messages. Every once in a while the JVM crashes because of an app deployed to one of my servers. I want to alert someone to check on the server to see if its restarted by nodemanager, but the message appears as a [DEBUG] message in my standard out log which it doesn't look like can be redirected to the server log.

Hi
Yes, you can generate list of server with registry key.you need to create a custom class bases of local application and create a registry filtered discovery to check reg key is present.
helpful links :
http://social.technet.microsoft.com/wiki/contents/articles/14450.management-pack-service-model-exercise-4-creating-a-registry-discovery.aspx
Note : scom is monitoring tool but not an assert inventory tool, i do not recommend any mp configurations for reporting.
Regards
sridhar v

Mail flow completely broken after upgrading Exchange Server 2013 CU3 (Build 775.38) to Exchange Server 2013 SP1 (Build 847.32)

internal mail flow completely broken.
external mail flow completely broken.
i upgraded exchange server as follows:
1. setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms
2. setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
3. upgraded the exchange server with GUI installer
also considered this: http://support.microsoft.com/kb/2938053/en-us
receive connectors :
Transport Service couldn't start, then i disabled hub transports, and it starts, but no mail flow on port 25. according to this:
http://social.technet.microsoft.com/wiki/contents/articles/24056.what-the-crash.aspx
i didn't have any success to fix mail flow, any solution?

Hi Alireza
The above tech-net http://social.technet.microsoft.com/wiki/contents/articles/24056.what-the-crash.aspx
will be applicable only if we get these events in the app log 1019,1018,1036,4999
You can check the transport service is running in which service account - Local or network
It should be running in network account by default.
You can run get-transportagent and check if there are any transport agents installed
If you find them then disable all the transport agents that you have installed on the Exchange servers by running disable-transportagents
Disable the antivirus if you have any installed.
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com

Monitoring Notification Mailer

Guys,
We have an issue with notification mailer needing to be restarted on a regular basis. Is there a common method of monitoring notification mailer. Can a cron be setup to send an alert when it goes down.
Thanks in advance,

Hello
First off, please check the WF mailer log file on the concurrent tier under $APPLCSF/$APPLLOG. The file is named FNDCP*txt - check the latest ones. You should be able to see errors there pointing out to the issue that is killing the mailer.
Now, to answer the question directly, you can check fnd_svc_components. There you will see the status of the WF mailer and if it appears not running then you can create your alert based on it. A query like this might do:
select component_name, component_status
from fnd_svc_components
where component_type='WF_MAILER';
Regards,
Alejandro

SCOM Console Monitoring on Client Desktops

Hi,
Has anyone configured SCOM console monitoring on client desktops?
The SCOM console goes to Not Responding state or takes time to load Monitoring View.I want to set monitoring for the same.

For generic client desktop monitoring, you may import windows 7 or windows 8 client MP, can download from
http://www.microsoft.com/en-us/download/details.aspx?id=15700 for windows 7 and
http://www.microsoft.com/en-us/download/details.aspx?id=38434 fro windows 8
Moreover, for troubleshoot poor operations console performance you may
Firstly, please try clearing cache and see how it works:
How and When to Clear the Cache
http://technet.microsoft.com/en-us/library/hh212884.aspx
If the issue persists, please check it referring to the following posts:
OpsMgr 2007: Troubleshooting Console Performance in large environments
http://blogs.technet.com/b/operationsmgr/archive/2009/09/17/opsmgr-2007-troubleshooting-console-performance-in-large-environments.aspx
Speeding up the SCOM Console
http://thoughtsonopsmgr.blogspot.com/2009/03/speeding-up-console.html
Meanwhile, please also check the Event Log on the management server.
Roger

Clean up of work flow logs entries (WFMC) from tables CMFP and CMFK

Hi,
I am cleaning up the tables CMFP and CMFK for work flow logs entries with app id WFMC. I used the cleanup programs RSCLNAFP, RSCLCMFP but the entries are still seen on the tables. Can anyone please advice ?

Hey,
I think notes: 627257, 758952 would help.
if not, please read notes 52114, 617634, and:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/25c1f5d1-0901-0010-d495-e96d02a0cb01
the link above advice to run transaction NACE:
To avoid unnecessary growth of tables CMFP and CMFK, you can prevent the creation of processing logs by following these steps:
1. Call up transaction NACE (Conditions for Output Control).
2. Choose the desired applications and then Output Types.
3. Double click on the output type to go to the detail view where you can make the necessary settings. To make the settings you must enter the change mode.
4. Set the indicator do not write processing log and save your settings.
This setting is only applicable to the individual application and output type. If it is set, processing logs will be collected in the main memory, but they will not be written to the database. Other output types are not affected by this setting. You have to repeat the aforementioned steps for each output type individually. It is not possible to switch off the processing log for all output types at the same time. For more information on the setting do not write processing log see the corresponding documentation.

How do I monitor the number of logged on users in EP6.0 SP11?

Hi folks,
We are on SAP Enterprise Portal 6.0 SP11.
I want to know the procedure by way of which I can monitor the number of logged on users in the Portal. Again, the logged on users can mean two things:
1) Number of unique users at any given time
2) Number of user sessions at any given time
Now, here are certain things I know:
1) EP6.0 SP2 had the Logged On Users iView. It's taken out in SP11 though.
2) The Portal Activity Report can be used for this purpose in SP11. However, we don't have any plans to implement that right now.
3) The Visual Admin can be used to monitor the user sessions and I am fine with that. However, my requirement is to collect user-load metrics every hour and I cannot really afford to monitor the Visual Admin that frequently.
4) If I use the J2EE Telnet Admin, I can come to know the number of user sessions.
As is apparent, I have no trouble getting the total number of user sessions. So, I guess the real question is - Is there any way by which I can know the number of unique users that are logged on to the Portal at any given time?
Kindly let me know if there is a way for that (other than maybe the Portal Activity Report), and I promise to reward generously
Thanks in advance!
Regards,
Sagar

Hello Sagar,
You have to write an application in that u have to use the follwing code
Step 1:
import the Files like
import com.sap.security.api.IUser;
IPortalComponentRequest request = IPortalComponentRequest)this.getRequest();
IUser usrSO =request.getUser();
strSOID = usrSO.getUniqueName();
Step 2:
Create a table at DB with the fields like userid Time and required filelds...
Step 3 :
Deploy your application and create a iview from PAR
then create a invisible iview or attach the iview at the end of the page and attach this in every user role
when the user logged in auto matically his ID will stored in the DB..
Try to attch this iview in visible mode into System Admin role ..see the Number of users logged in
But u have to write a efficient application for this
Don't forget to award points ....
Sreedhar G

Tracking Mail Flow " user cannot get mail from server"

Please help to tracking message from mail flow on ECP. Why user cannot get mail ?
Delivery Report for [email protected]
Pending
3/19/2014 9:36 AM exchmb01.test.in.th
The message has been transferred from exchmb01.test.in.th to
exchmb02.test.in.th
3/19/2014 10:33 AM exchmb01.test.in.th
No further information is available about this message because the logs are no longer available.

Hi,
I recommend you enable message tracking, using the following cmdlet:
Set-TransportService xxx -MessageTrackingLogEnabled $true
And then use message tracking log to check if there is any information.
Here is a helpful article for your reference.
Message Tracking
http://technet.microsoft.com/en-us/library/bb124375(v=exchg.150).aspx
Hope it helps.
Best regards,
Amy
Amy Wang
TechNet Community Support

SCOM to monitor Windows Service

Hi ,
SCOM can monitor process level information (memory/cpu/is your service running/restart if it is not) of a windows service . But what our experts say is SCOM cannot get the code-level details for performance issues(for Windows Service) like you
see on the SCOM AppDiagnostics site for the web applications/web services.Suppose if we want to get the specific dll or the function hitting the performance .
Please suggest If SCOM is able to achieve code-level details for performance issues of Windows service also.
Please let me know if you have any questions.
Thanks,
Deepak Upreti

Hi Deepak,
I donnot think that any one have guide on how to.
If have I have do it, the I will use the Diagnostic Taks, where I will call some SysInternals tools(Process
Explorer or Process Monitor) to collect data.
That is the best I can do for you.
Best Regards Christian 'Biks'

Problem collecting mail since 8th/9th - almost a s...

Is anyone having or aware of any general problems or issues collecting email since about Wednesday night 8th/9th June? -- I use OE.
BT has been my ISP for several years, so I have BT addresses as well as some set up with a former ISP (tesco.net) which are also of course handled via the BT Yahoo account. All are set up correctly (I've checked the settings are in place as they should be, and haven't been varied/altered for any reason), and they've always all worked without any problems at all since joining BT.
But between switching off the system in the early hours of Thursday morning and booting up again later in the day, collecting mail has been a nightmare. At first it seemed as if clicking Send/Receive froze it up, but I realised later on it wasn't actually stalling altogether -- it's just very, VERY slow. For instance it takes the best part of an hour to download one small message of a line or two, maybe about 2kb.
Outgoing SMTP mail for both lots of accounts via mail.btinternet.com is no trouble at all and works completely normally at the usual speed and with no issues. Only incoming mail is affected, but I can't think it's anything to do with the Tesco POP3 address, because it's not only affecting mail on those accounts, but the BT ones as well (mail.btinternet.com again). They're all having the same problem.
Of course I can check both sets of inboxes online for incoming messages, but it's a hassle as I use the various different accounts for different categories of mail, so it's less straightforward than the convenience of a desktop client which I'm so used to, where they come in to one place and I'm able to browse all my mail from there, as well as store it on the system and compose at leisure offline. Online means logging in and out of each one individually. I just hate webmail... call me old-fashioned!
Internet browsing is unaffected, with Firefox (and IE). My BB package renewed at the beginning of the month and I changed from Option 3 to Option 2, but (a) this was about a week before the problem began, and (b) I'm not sure it would have any bearing anyway.
So any general issues anyone's aware of which are going on at the moment, or any ideas?
Many thanks.

I still have this problem. Yesterday I thought it might have sorted itself out, but no such luck. As I have several different email accounts (and they all have the same trouble whether it's a BT address or others from another ISP), I've only been trying to download mail for one account at a time (in turn) with OE, instead of all accounts at once.
Yesterday seemed no different to begin with, than it had been for the previous week -- clicked Receive for one of the accounts, the dialog box showed 3 messages to download, and as usual it was slow, slow, SLOW. The first message took all of about 50-55m to come in, and it was only 4kb! But then suddenly the other 2 following it came in at normal speed in a flash, as they should.
Tried another account where I knew there was mail in (having seen it on the server). They came in normally too. And so did all the rest of the accounts. Brilliant! -- I thought FINALLY, whatever the cause had been, I was through it. And I was thrilled as I'd been able to get all my mail in up to date at one sitting instead of the laborious process of going through each account in turn and having to walk away from the machine between them to do something else.
But a few hours later when I collected again, it was back to ultra-slow again. And today the same.
I've been searching around for some answers without a lot of luck: quite a few seem to report an overall slowness problem, or they're having problems sending mail out, but not so much my situation which only affects incoming mail. As I posted before, I can send normally, and the browser's also unaffected (so it's not the connection) -- it only happens with incoming mail.
Eventually I came across this 2009 page which seems to sum it up exactly:
http://www.nologinspace.com/show item.aspx?itemf=187&title=BT Internet POP Problems and Issues
There's no solution given, but it seems to nail the problem I'm having, and suggests it's some unknown issue to do with BT's POP servers.
Anyone come across this problem, or able to throw any more light on it? Or know what (if anything) can be done?
The only slight difference between their description and me is I don't get a timeout or error message, just sometimes the prompt "Your server has not responded in xxx seconds" and asking if I want to Stop or Wait. If that appears I tell it to wait, as my experience over the last week is the mail does arrive eventually if I wait long enough. Unlike them I haven't been deleting mail off the server either (except any spam), for the same reason. I've done that very occasionally in the past if one particular message persistently seems to be causing a logjam, but this doesn't strike me as one of those scenarios, because it's doing it over and over and over again, even when all previous mail has been cleared (excrutiatingly slowly!) from the accounts a few hours earlier, and every inbox is starting from empty with a completely new batch of different messages.
Any thoughts and possible solutions really appreciated.

Mail flow is not working Exchange 2010 to 2013 in coexistence mode

Hi ,
We are migrating Exchange 2010 sp3 to Exchange 2013.
mail flow is not working from 2010 to 2013, mails are qued up in smtp relay queueu.
already added 2010 ip address to 2013 receive connector and give anonymous permission.
but still mails are smtp relay queue.

Hi Sujith,
As requested by
Nithyanandham please post the error from Queue Viewer.
Few things to check.
Please remove IP address from "Default Receive connector" first.
Ensure both servers can ping by FQDN and it returns correct IP. i.e. ping exch2013.contoso.com
Make sure both exchange server can communicate each other. if possible try to telnet port 25 by FQDN of the Exchange2013 server and try to send an email from exchange2010 using the URL below. if there is any error please post error.
http://exchange.mvps.org/smtp_frames.htm
Make sure "Exchange server Authentication" is ticked in your default receive connector properties. If not ticked tick it and restart Transport service and check mail flow again.
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Running Mail Flow Central without direct connection?

Do we have a possibility to run Mail Flow Central (Version 1.4.0 (103)) without direct connection to the devices?
I mean: We have a local copy of (all) the logfiles, but we cannot connect directly from our local installation of MFC to the devices.
How can we "import" this logfiles on our local installation of MFC?

Thank you.
I found the directory:
MailFlowCentral\Mail Flow Central\mailFC\mgaLogs\incomingI tried the following steps:
a) I copy some files from the offline-log-directory "mail_logs" looking like [email protected]
b) I stopped and started the service "Mail Flow Central"
-> No luck: There is currently no data in the Mail Flow Central database.
c) I renamed the above files to [email protected] and repeated b).
-> No luck: There is currently no data in the Mail Flow Central database.
d) I moved the above files to the manually created \1\ and repeated b).
-> No luck: There is currently no data in the Mail Flow Central database.
e) I renamed back the above files to [email protected] still in \1\ and repeated b).
-> No luck: There is currently no data in the Mail Flow Central database.
Could you please have a look what I need else for my installed MFC-version 1.4.0-103?
In the meantime, I have added a "dummy-host" with the IP "localhost" and the logname "mail*".
Seconds after I put some of the above files (with or without the extension .001.r) the files are processed and moved to MailFlowCentral\Mail Flow Central\mailFC\mgaLogs\archive\1
Unfortunately, the results remain the same: There is currently no data in the Mail Flow Central database.
But in the host-section I found this error:Mon, 21 Apr 2008 18:10:54 +0100 Failed Unsuccessful import. Error while importing file. Import failed, an error occurred with the downloaded log file: '[Errno 13] Permission denied: '.\\mgaLogs\\incoming\\1\\[email protected]''
What kind of permission should I set (I'm trying it actually on my WinXP without any permission set on this MFC-Directories..)

Mail Flow between 2 AD Sites stops and EMC unavailable on the local server

Hello All,
I'm hoping you can help me find a solution to this recurring problem.
SYMPTOMS :
Mail Flow between 2 EXCH2010 servers in 2 different AD Sites (separate time zones) stops suddenly with no messages in the Event Viewer or exchange logs.
When this happens the EMC is unavailable on the local server : Error message Connection attempt to http://<servername> with the help of "Kerberos" failed : The connection to the remote server failed with the following error : Access Refused
Same error when opening Exchange Powershell
On the OTHER server (ie the one I can connect to in Site 2) I can :
1 - Connect to the first server using EMC with no problems
2 - Using mail queue viewer pointed at the server in Site 2 I can see the following error for email directed to the server in Site 1 : 451 4.4.0 Primary target address responded with: "235 00000804YIIF/<load of alphanumeric characters 80 or so long>
RECOVERY :
A reboot of the server allows access to the EMC and Powershell and mail flow once again starts.... until the next time
OTHER INFORMATION :
When in the above state, ran Exchange Management Troubleshooter which finds errors but cannot identify them : "Unknown Error" then stops !
Ran ExBPA : turns up nothing
Currently needing to reboot every day or so.
I though maybe the local server had a problem with resolving itself correctly, did some troubleshooting around that and turned up nothing. Even added itself to its hosts file in order to resolve its IP : Changed nothing.
Searched on the above error 451 4.4.0 etc and turned up nothing useful.
I think the Kerberos error is telling, but I haven't turned anything up during a search yet.
Any ideas ?
Please AMA if you need more info or clarification.
Matthew

Hello,
When the issue happens, can you telent the target server successfully?
Please refer to the following KB article to see if it helps:
https://support2.microsoft.com/kb/979175?wa=wsignin1.0
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Establish mail flow from Exchange 2007 to Exchange 2013

I am currently using Exchange 2007 into three sites in three cities and two of the sites are connected to Internet sending and receiving emails via Edge transport servers.
Now I am planning to upgrade to exchange 2013 CU1. I don't find any documentation on how to establish mail flow between Exchange 2007 and Exchange 2013. Will it be automatic or do i need to create specific connectors between them?

Was this question answered. We're in the same situation now as we're upgrading to Exchange 2013 from 2007. The latest CU certainly helped. Initially the test mailboxes on Exchange 2013 couldn't email each other - This was resolved with CU7 and
using "Custom Settings" - manually entered IPs for DNS in the Exchange Admin Center "DNS Lookups".
Issue at the moment Test mailboxes on Exchange 2013 cannot email mailboxes on 2007 or visa-versa and mail from external sources queues on the 2007 box.
Any assistance will be greatly appreciated.

SCOM+Exchange2010+monitoring+collecting mail flow logs

Similar Messages

Maybe you are looking for