Device Details
|
Device Name |
MS Windows Event Logging - MSExchange Management |
|---|---|
|
Vendor |
Microsoft |
|
Device Type |
MSExchange Management |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version(s) |
N/A |
|
Collection Method |
MS Windows Event Logging |
|
Configurable Log Output? |
N/A |
|
Log Source Type |
MS Windows Event Logging - MSExchange Management |
|
Log Processing Policy |
LogRhythm Default v2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://www.myeventlog.com/search/show/785
https://social.technet.microsoft.com/Forums/lync/en-US/9d1fb3a4-ceda-4e60-b4f3-0ae2fba44aed/error-seeding-database?forum=exchangesvrdeploy
https://social.technet.microsoft.com/Forums/ie/en-US/c663ad93-3712-45da-b7f9-d6d914ad71a5/event-id-6-cmdlet-failed?forum=exchangesvravailabilityandisasterrecoverylegacy https://community.spiceworks.com/topic/2301316-exchange-2013-1000s-of-event-id-6-logs
https://monitoring356.rssing.com/chan-15363047/all_p278.html |
Supported Log Messages
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
V 2.0 : EVID 1-2 : Cmdlet Succeeded |
N/A |
<vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1>, <domainorigin>, <login>, <result> |
|
V 2.0 : EVID 4 : Cmdlet Stopped |
N/A |
<vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1> |
|
V 2.0 : EVID 6 : Cmdlet Failed |
N/A |
<vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1>, <login> |
|
V 2.0 : EVID 8 : Throwing Unhandled Exception |
N/A |
<vmid>, <severity>, <session>, <vendorinfo>, <dname>, <command>, <tag1>, |
|
V 2.0 : Catch All : Level 1 |
N/A |
<tag2>, <vmid> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.660.0 |
MS Windows Event Logging - MSExchange Management |
New Log Source Optimization (LSO) policy: LogRhythm Default v2.0 |
Optimized new log processing policy for MS Windows Event Logging - MSExchange Management |