4.27 MBS_MessagingRecordsMgmt

Use this Knowledge Script to monitor Messaging Records Management (MRM) tasks such as deleting, journaling, moving, and retention, and to monitor the Windows Event log for MRM-related events. This script raises an event if a threshold is exceeded.

4.27.1 Resource Objects

  • Exchange2007_MailboxServer

  • Exchange2010_MailboxServer

  • Exchange2013_MailboxServer

  • Exchange2016_MailboxServer

  • Exchange2019_MailboxServer

4.27.2 Default Schedule

By default, this script runs every 15 minutes.

4.27.3 Setting Parameter Values

Set the following parameters as needed:

Parameter

How to Set It

General Settings

Job failure event notification

Event severity when job fails

Set the severity level, from 1 to 40, to indicate the importance of an event in which the MBS_MessagingRecordsManagement job fails. The default is 5.

Monitor Messaging Records Management

Monitor Messages Deleted But Recoverable

Event Notification

Raise event if number of messages deleted but recoverable exceeds threshold?

Select Yes to raise an event if the number of deleted, but recoverable, messages exceeds the threshold you set. The default is Yes.

Exchange can recover messages that users have deleted from their Deleted Items folders. You can use Exchange System Manager to define how many days a deleted message stays in the mailbox store before being permanently deleted.

Event severity when number of messages deleted but recoverable exceeds threshold

Set the severity level, from 1 to 40, to indicate the importance of an event in which the number of recoverable messages exceeds the threshold you set. The default is 15.

Threshold - Maximum number of messages deleted but recoverable

Set the maximum number of recoverable messages that can be in the mailbox store before an event is raised. The default is 1000 messages.

Data Collection

Collect data for number of messages deleted but recoverable?

Select Yes to collect data for charts and reports. When enabled, data collection returns the number of recoverable messages deleted during the monitoring interval. The default is Yes.

Monitor Messages Permanently Deleted

Event Notification

Raise event if number of messages permanently deleted exceeds threshold?

Select Yes to raise an event if the number of permanently deleted messages exceeds the threshold you set. The default is Yes.

You can use Exchange System Manager to define how many days a deleted message stays in the mailbox store before being permanently deleted.

Event severity when number of messages permanently deleted exceeds threshold

Set the severity level, from 1 to 40, to indicate the importance of an event in which the number of permanently deleted messages exceeds the threshold you set. The default is 15.

Threshold - Maximum number of messages permanently deleted

Set the maximum number of messages that can be permanently deleted before an event is raised. The default is 1000 messages.

Data Collection

Collect data for number of messages permanently deleted?

Select Yes to collect data for charts and reports. When enabled, data collection returns the number of messages permanently deleted during the monitoring interval. The default is Yes.

Monitor Messages Journaled

Event Notification

Raise event if number of messages journaled exceeds threshold?

Select Yes to raise an event if the number of journaled, or archived, messages exceeds the threshold you set. The default is Yes.

The Exchange Journaling feature allows users to archive all incoming and outgoing e-mail for a specific mailbox store.

Event severity when number of messages journaled exceeds threshold

Set the severity level, from 1 to 40, to indicate the importance of an event in which the number of archived messages exceeds the threshold you set. The default is 15.

Threshold - Maximum number of messages journaled

Set the maximum number of messages that can be archived before an event is raised. The default is 1000 messages.

Data Collection

Collect data for number of messages journaled?

Select Yes to collect data for charts and reports. When enabled, data collection returns the number of messages journaled during the monitoring interval. The default is Yes.

Monitor Messages Moved

Event Notification

Raise event if number of messages moved exceeds threshold?

Select Yes to raise an event if the number of messages moved from one managed folder to another exceeds the threshold you set. The default is Yes.

Event severity when number of messages moved exceeds threshold

Set the severity level, from 1 to 40, to indicate the importance of an event in which the number of moved messages exceeds the threshold you set. The default is 15.

Threshold - Maximum number of messages moved

Set the maximum number of messages that can be moved before an event is raised. The default is 1000 messages.

Data Collection

Collect data for number of messages moved?

Select Yes to collect data for charts and reports. When enabled, data collection returns the number of messages moved during the monitoring interval. The default is Yes.

Monitor Messages Past Retention

Event Notification

Raise event if number of messages marked as past retention date exceeds threshold?

Select Yes to raise an event if the number of deleted messages that have passed their retention date exceeds the threshold you set. The default is Yes.

Use Exchange System Manager to define how many days a deleted message stays in the mailbox store.

Event severity when number of messages marked as past retention date exceeds threshold

Set the severity level, from 1 to 40, to indicate the importance of an event in which the number of expired messages exceeds the threshold you set. The default is 15.

Threshold - Maximum number of messages marked as past retention date

Set the maximum number of messages that can have passed their retention date before an event is raised. The default is 1000 messages.

Data Collection

Collect data for number of messages marked as past retention date?

Select Yes to collect data for charts and reports. When enabled, data collection returns the number of messages that expired during the monitoring interval. The default is Yes.

Monitor Windows Event Log for Messaging Records Management Events

Event Notification

Comma-separated list of event sources to ignore

Provide a list of event sources that this script should ignore when scanning the Windows Event log. Separate the source names with a comma.

Event sources are computers whose names are displayed in the Source column of the event log.

Comma-separated list of event categories to ignore

Provide a list of event categories that this script should ignore when scanning the Windows Event log. Separate the category names with a comma.

Comma-separated list of event IDs to ignore

Provide a list of error and warning ID numbers that this script should ignore when scanning the Windows Event log. Separate the numbers with a comma.

Raise event if MRM error events are found?

Select Yes to raise an event if MRM error events are found in the Windows Event Log. The default is Yes.

Event severity when MRM error events are found

Set the severity level, from 1 to 40, to indicate the importance of an event in which the Windows Event Log contains MRM error events. The default is 10.

Raise event if MRM warning events are found?

Select Yes to raise an event if MRM warning events are found in the Windows Event Log. The default is Yes.

Event severity when MRM warning events are found

Set the severity level, from 1 to 40, to indicate the importance of an event in which the Windows Event Log contains MRM warning events. The default is 20.