Deciphering Warning Message - Root Folder ID or Message Instance ID Information.
Exchange 2007 SP1 Rollup 10, Single Server.
Application Log Warning
We have been receiving a warning message that I would like to track to a source message.
Event Type: Warning
Event Source: MSExchangeIS Mailbox Store
Event Category: Background Cleanup
Event ID: 9805
Date: 8/17/2011
Time: 4:15:00 AM
User: N/A
Computer: LSS003
Description:
Cleanup of the DeliveredTo table for database 'Third Storage Group\Executive Database' detected an entry with an invalid submission time. However, the message delivery time appeared valid, so the entry will not be removed until it expires normally.
Submission Time: 10/8/2011 12:00:15 PM GMT (0x00000000d7047180)
Delivery Time: 8/10/2011 4:47:22 PM GMT (0x000000002d12d10d)
Root Folder ID: 4-6500D17
Message Instance ID: 1-12AE35D2B
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
I can't seem to figure our how to determine the message since searching against the delivery time hasn't led to an exact correlated message, and the Message Instance ID doesn't seem to match the Message ID in Message Tracking nor does the Root Folder
ID seem to be found. I don't think the errors are causing an issue, but I would like to determine hte source (i.e., a poorly written code from a mail enabled application) to see if it is something easily correct. The closest I get is messages from
System Mailbox with a subject of Test Message (followed by a rather long GUID), but there seem to be far more of those than the number of Warning entries that I am receiving.
Thanks for your help.
Jim@Work
August 17th, 2011 7:53pm
On Wed, 17 Aug 2011 16:53:09 +0000, Jim_Work wrote:
>Exchange 2007 SP1 Rollup 10, Single Server.
>
>Application Log Warning
>
>We have been receiving a warning message that I would like to track to a source message.
>
>Event Type: Warning Event Source: MSExchangeIS Mailbox Store Event Category: Background Cleanup Event ID: 9805 Date: 8/17/2011 Time: 4:15:00 AM User: N/A Computer: LSS003 Description: Cleanup of the DeliveredTo table for database 'Third Storage Group\Executive
Database' detected an entry with an invalid submission time. However, the message delivery time appeared valid, so the entry will not be removed until it expires normally.
>
> Submission Time: 10/8/2011 12:00:15 PM GMT (0x00000000d7047180) Delivery Time: 8/10/2011 4:47:22 PM GMT (0x000000002d12d10d) Root Folder ID: 4-6500D17 Message Instance ID: 1-12AE35D2B
>
>For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
>
>I can't seem to figure our how to determine the message since searching against the delivery time hasn't led to an exact correlated message, and the Message Instance ID doesn't seem to match the Message ID in Message Tracking nor does the Root Folder
ID seem to be found. I don't think the errors are causing an issue, but I would like to determine hte source (i.e., a poorly written code from a mail enabled application) to see if it is something easily correct. The closest I get is messages from System Mailbox
with a subject of Test Message (followed by a rather long GUID), but there seem to be far more of those than the number of Warning entries that I am receiving.
To get a dump of the information in the database you'd have to run
isinteg with the "-dump" option. That would get you the mailbox ids,
folder-ids, etc.
I don't know that it would dump the contents of the DeliveredTo table,
though.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
August 18th, 2011 5:00am
Thanks for your response. I was able to stumble across the actual message. Otherwise, I don't think it would be worth doing a dumb to learn te root folder ID and corresponding mailbox.
Thanks!
August 19th, 2011 10:34pm