Event 623
We're running Exchange 2003 and had this event occur this afternoon (along with 9791 and 1022). I've seen several KBs that each provide a hotfix, but I'm not sure which of the potential causes was our problem. How do I figure that out? There were no backups
running. Here is event 623:
Event Type: Error
Event Source: ESE
Event Category: Transaction Manager
Event ID: 623
Date: 9/22/2011
Time: 2:33:37 PM
User: N/A
Computer: serverName
Description:
Information Store (3008) storeName: The version store for this instance (1) has reached its maximum size of 249Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected
until the long-running transaction has been completely committed or rolled back. Possible long-running transaction:
SessionId: 0xBD331240
Session-context: 0x00000000
Session-context ThreadId: 0x00003560
Cleanup: 1
Thanks.
September 22nd, 2011 5:38pm
Hi mhashemi,
Yes, there are a lot of resources about the Event 623:
Do end users meet some symptoms?
"Users unable to access their inbox", "Email backing up in the local delivery queue" and "Email awaiting directory lookup". See:
http://blogs.technet.com/b/exchange/archive/2006/04/19/425722.aspx
"immediately at the start of the Information Store service".
See:
http://blogs.technet.com/b/exchange/archive/2008/05/23/3405532.aspx
Anyhow, please download the Exbpa and run a Health Check. If warning/error exists, please try to resolve it.
http://www.microsoft.com/download/en/details.aspx?id=22485
After that, please check Event 1221, if there are a lot of white space, please run the Eseutil /D. Then run isinteg until you see 0 errors, 0 fixes & 0 warning.
Eseutil /D Defragmentation Mode
http://technet.microsoft.com/en-us/library/bb123761(EXCHG.65).aspx
Exchange Command-Line Parameters for the Isinteg.exe Tool
http://support.microsoft.com/kb/301460
Frank Wang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
September 23rd, 2011 2:59am
We saw that users were unable to access their mailbox for about 15 minutes. This is the first time this has happened. :)
How would you define "a lot of white space?" I've got a DB that's about 100GB and the white space is 911MB which doesn't seem like much.
I'll run the BPA too.
September 23rd, 2011 10:14am
This can actually be due to a long running transaction, for example I had this happen years ago when running a rule on a service account mailbox that was 10GB. Systems low on resources typicall disk latency which you can take a look at (log buffer stalls)
which will consume your version memory. Monitor your log buffer stalls in perfmon
ESE log buffers that are set too low can cause the Microsoft Exchange Information Store service to stop responding
http://support.microsoft.com/kb/328466James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 23rd, 2011 11:19am
Some more information I have is that event 1022 showed two specific users. I talked to them and they couldn't think of anything they were doing in Outlook that'd cause a long transaction and I didn't see any large messages from that day.
The troubleshooting blog from the Exchange team suggests running isinteg -S Servername -FIX -TEST ALLTESTS and eseutil /g. Can these be run will Exchange is running, or do I need to dismount all the stores first?
September 23rd, 2011 2:07pm
When you run it it will prompt you telling you that it will dismount.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 23rd, 2011 2:34pm
Hi mhashemi,
Any updates?
Frank Wang
September 25th, 2011 10:08pm
Hi mhashemi,
Any updates?
Frank Wang
Free Windows Admin Tool Kit Click here and download it now
September 27th, 2011 9:52pm