none
MessageTrackingLog shows only two type of events and No Recipients

    Question

  • We have a single Exchange 2010 box start to show some weird behavior. A couple users have reported email delays recently. After run get-messagetrackinglog command, I notice all the activities in the log contains only two eventid: NOTIFYMAPI and SUBMIT. And Under "Recipients" column, there is only "{}", blank, no recipients address at all for all the messages in the log. I tried a couple different time windows and get the same thing.

    Look back the message tracking log I captured around 1 year back, this is definitely not the case. I can see there were "RECEIVE, RESOLVE, DELIVER, SEND..." events. For some reason, Exchange is only doing two types of activities: NOTIFYMAPI and SUBMIT...

    So far send and receive emails...


    • Edited by aha_tom Wednesday, May 08, 2013 2:33 AM
    Wednesday, May 08, 2013 2:31 AM

Answers

  • On Wed, 8 May 2013 02:31:04 +0000, aha_tom wrote:
     
    >We have a single Exchange 2010 box start to show some weird behavior. A couple users have reported email delays recently. After run get-messagetrackinglog command, I notice all the activities in the log contains only two eventid: NOTIFYMAPI and SUBMIT. And Under "Recipients" column, there is only "{}", blank, no recipients address at all for all the messages in the log. I tried a couple different time windows and get the same thing.
     
    Those are the only events you'll find in the MSGTRKM*.LOG files. If
    the server has only the mailbox role installed on it then those are
    the only log on the machine. The mailbox role only SUBMITs messages
    and NOTIFYs the hub transport role that there's a message to be
    handled.
     
    On machines that have the hub transport role installed you'll find
    MSGTRK*.LOG files (note there's not a send letter "M" in the name).
    These log files contain lots more events.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Thursday, May 09, 2013 1:51 AM

All replies

  • On Wed, 8 May 2013 02:31:04 +0000, aha_tom wrote:
     
    >We have a single Exchange 2010 box start to show some weird behavior. A couple users have reported email delays recently. After run get-messagetrackinglog command, I notice all the activities in the log contains only two eventid: NOTIFYMAPI and SUBMIT. And Under "Recipients" column, there is only "{}", blank, no recipients address at all for all the messages in the log. I tried a couple different time windows and get the same thing.
     
    Those are the only events you'll find in the MSGTRKM*.LOG files. If
    the server has only the mailbox role installed on it then those are
    the only log on the machine. The mailbox role only SUBMITs messages
    and NOTIFYs the hub transport role that there's a message to be
    handled.
     
    On machines that have the hub transport role installed you'll find
    MSGTRK*.LOG files (note there's not a send letter "M" in the name).
    These log files contain lots more events.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Thursday, May 09, 2013 1:51 AM
  • If the issue continues, please provide more information on how you search the log.

    Just for your reference:

    http://technet.microsoft.com/en-us/library/bb124926(v=exchg.141).aspx

    Hope it is helpful.


    Fiona Liao
    TechNet Community Support

    Thursday, May 09, 2013 7:17 AM
    Moderator
  • Thanks, the issue is somehow relate to the memory usage too high. The server start to write Exchange database cache to page file. After reboot the server the issue went away.
    Monday, May 20, 2013 11:57 PM