I would say use the message tracking logs, export out the context for the last
few days to a CSV and then filter it..
Get-TransportServer | Get-MessageTrackingLog -Start "00:00:00 5/1/2015" |
Select ClientIP, ClientHostname, ServerIP, ServerHostname, EventID, Sender,
{$_.Recipients}, MessageSubject, TotalBytes | Export-CSV C:\Temp\MsgTracking.csv
Once you have the CSV you can then add a table, and then filter the bytes from
largest to smallest. Although not in GB, you can see if there is a pattern of
someone spamming the org with massive attachments.
From: [email protected]
To: [email protected]
Subject: RE: [Exchange] Exchange 2007 Hub Transport DB/Service logs growing out
of size and transport service stopped.
Date: Thu, 7 May 2015 12:06:52 +0000
Thank you Candee.
If you misunderstood me, It is not the mailbox database but, it is the
transport queue database.
Regards
Liby Philip Mathew | Principal Systems Administrator
ICT Professional Services
Path Solutions
Tel: +965 22286760 Ext. 1400
Fax: +965 24824500
www.path-solutions.com
From: [email protected] [mailto:[email protected]]
On Behalf Of Candee
Sent: Thursday, May 7, 2015 2:56 PM
To: [email protected]
Subject: Re: [Exchange] Exchange 2007 Hub Transport DB/Service logs growing out
of size and transport service stopped.
Run a full backup.
On Thu, May 7, 2015 at 1:45 AM, Liby Philip Mathew <[email protected]>
wrote:
HI,
I have a client who is still on E2K7 SP3 RU15 with W2K3 AD without any HA
solution. Recently they are facing an issue with Exchange Transport service
stopping.
After checking the server, I found out that the transport DB, mail.que is
growing and at around 5GB+ the service is being stopped. The transaction logs
(3GB +) are not being purged
or committed. There are no mails in the queue.
I have removed the everything from the folder C:\Program
Files\Microsoft\Exchange Server\TransportRoles\data\Queue. Restarted the
transport service, recreated the mail.que, EDB,
repaired the DB, ruled out back pressure etc. No other services are affected.
Is there any option, app or script to check if someone is attempting to send a
huge attachment in GB’s. There were no attachment size limitation until I
configured it yesterday.
What can be the issue? Any suggestion appreciated.
TIA.
Regards
Liby
Disclaimer
[The information contained in this e-mail message and any attached files are
intended solely for the use of the individual or entity to whom they are
addressed. This transmission may contain information that is confidential,
Path Solutions Private, or exempt from disclosure under applicable law and/or
Path Solutions information security policy. The receiver of this communication
shall not transmit any part
of this message unless the email subject clearly classify it as “Public” or a
written permission has been given by the information assets owner. If you have
received this e-mail in error, please notify the sender immediately and delete
all copies, any disclosure,
copying, distribution, or use of the information contained herein is STRICTLY
PROHIBITED. Path Solutions accepts no responsibility for any errors, omissions,
computer viruses and other defects.]
P
Protect our planet: Do not print this email unless necessary.
Disclaimer
[The information contained in this e-mail message and any attached files are
intended solely for the use of the individual or entity to whom they are
addressed. This transmission may contain information that is confidential, Path
Solutions Private, or exempt
from disclosure under applicable law and/or Path Solutions information
security policy. The receiver of this communication shall not transmit any part
of this message unless the email subject clearly classify it as “Public” or a
written permission has been
given by the information assets owner. If you have received this e-mail in
error, please notify the sender immediately and delete all copies, any
disclosure, copying, distribution, or use of the information contained herein
is STRICTLY PROHIBITED. Path Solutions
accepts no responsibility for any errors, omissions, computer viruses and
other defects.]
P
Protect our planet: Do not print this email unless necessary.
