MSExchange Antispam 100

 

上一次修改主题: 2011-03-19

The Microsoft Exchange Server 2010 Management Pack for System Center Operations Manager monitors the Windows Application log on computers running Exchange 2010 and generates this alert when the events specified in the following Details table are logged.

To learn more about this alert, in Operations Manager, do one or more of the following:

  • From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.

  • From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the logged events that meet the criteria of this Operations Manager alert.

Details

Product Name

Exchange

Product Version

14.0

Event ID

100

Event Source

MSExchange Antispam

Category

General

Symbolic Name

AgentQueueFull

Message Text

Protocol Analysis Background agent warning. The queue this agent uses is full. This does not affect SRL calculations. Open proxy, reverse DNS, and sender blocking are affected.

Explanation

This Warning event indicates that the work queue that the Protocol Analysis Background agent uses is full. Sender reputation level (SRL) calculations are not affected. As stated in the event description, open proxy, reverse DNS, and sender blocking are affected. Specifically, each connection is processed on a first-in first-out basis. If the queue is full, no new connection data is submitted for processing. Therefore, new connections are delayed until the queue falls below the maximum value. This warning may appear during times when the server is functioning at peak design load.

备注

The maximum queue length is controlled by the msExchSenderReputationMaxWorkQueueSize attribute of the Sender Reputation object in the Message Hygiene options of the Transport Settings in Active Directory. The default value for msExchSenderReputationMaxWorkQueueSize is 1,000.

For more information about sender reputation anti-spam functionality, see:

User Action

No user action is required if this event rarely occurs. However, if the warning persists, or this event seems to be causing mail flow interruptions or other problems in your Exchange environment follow one or more of these steps:

  • 有关相关事件,请查看 Exchange 2010 服务器上的应用程序日志和系统日志。例如,在此事件之前和之后发生的事件可能会提供有关导致出现此错误的根本原因的详细信息。

  • 使用自助支持选项、协助支持选项及其他资源来解决您的问题。您可以从 Exchange Server 解决方案中心访问这些资源。在该页中,单击导航窗格中的“自助支持选项”可使用自助服务选项。自助服务选项包括搜索 Microsoft 知识库、在 Exchange Server 论坛上发布问题及其他方法。或者,您可以在导航窗格中单击“协助支持选项”来联系 Microsoft 支持专业人员。由于您的组织可能已有直接与 Microsoft 产品支持服务联系的特定流程,因此,请您务必先查看您组织的准则。

For More Information

如果您尚未执行此操作,请考虑运行 Exchange 工具,已创建这些工具以帮助您分析 Exchange 环境并对其进行疑难解答。这些工具可帮助确保您的配置与 Microsoft 最佳实践保持一致。它们还可以帮助您识别和解决性能问题,并改进邮件流。若要运行这些工具,请转到 Exchange 管理控制台的“工具箱”节点。若要了解有关这些工具的详细信息,请参阅管理工具箱中的工具