MS Windows Event Logging - MSExchange Management
Device Details
| Device Name | MS Windows Event Logging - MSExchange Management |
|---|---|
Vendor | Microsoft |
Device Type | MSExchange Management |
Supported Model Name/Number | N/A |
Supported Software Version(s) | N/A |
Collection Method | MS Windows Event Logging |
Configurable Log Output? | N/A |
Log Source Type | MS Windows Event Logging - MSExchange Management |
Log Processing Policy | LogRhythm Default v2.0 |
Exceptions | N/A |
Additional Information | https://www.myeventlog.com/search/show/785 https://social.technet.microsoft.com/Forums/lync/en-US/9d1fb3a4-ceda-4e60-b4f3-0ae2fba44aed/error-seeding-database?forum=exchangesvrdeploy https://social.technet.microsoft.com/Forums/ie/en-US/c663ad93-3712-45da-b7f9-d6d914ad71a5/event-id-6-cmdlet-failed?forum=exchangesvravailabilityandisasterrecoverylegacy https://community.spiceworks.com/topic/2301316-exchange-2013-1000s-of-event-id-6-logs https://monitoring356.rssing.com/chan-15363047/all_p278.html |
Supported Log Messages
Type | Product Version | Supported Schema Fields |
|---|---|---|
| V 2.0 : EVID 1-2 : Cmdlet Succeeded | N/A | <vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1>, <domainorigin>, <login>, <result> |
| V 2.0 : EVID 4 : Cmdlet Stopped | N/A | <vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1> |
| V 2.0 : EVID 6 : Cmdlet Failed | N/A | <vmid>, <severity>, <session>, <vendorinfo>, <dname>, <action>, <command>, <tag1>, <login> |
| V 2.0 : EVID 8 : Throwing Unhandled Exception | N/A | <vmid>, <severity>, <session>, <vendorinfo>, <dname>, <command>, <tag1>, |
| V 2.0 : Catch All : Level 1 | N/A | <tag2>, <vmid> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.660.0 | MS Windows Event Logging - MSExchange Management | New Log Source Optimization (LSO) policy: LogRhythm Default v2.0 | Optimized new log processing policy for MS Windows Event Logging - MSExchange Management |