2
Excessive Events in SmarterMail
Problem reported by Bruce Barnes - October 12, 2014 at 7:21 AM
Not A Problem
I am working on a case with a mutual customer who is seeing in excess of 4,400 events per day in his SmarterMail events log.
 
The customer is running SmarterMail 10.7.4842, on Windows Server 2008 R2 Datacenter, 64 bit.
 
Client's Server Configuration
Client's Server Configuration
 
The events, 10010, 10002, and 10009, repeat themselves every minute.
 
Here is a small sample of the events which continually repeat themselves:
 
00:00:47 Event Fired: 10009, Details: Argument(int) memorymbused=248; Argument(int) memorymbmax=4095; Argument(int) memorypercent=6; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:00:47 Event Fired: 10010, Details: Argument(int) threads=47; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:00:47 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:34 Event Fired: 10003, Details: Argument(int) uptimedays=98; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:34 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10009, Details: Argument(int) memorymbused=246; Argument(int) memorymbmax=4095; Argument(int) memorypercent=6; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10010, Details: Argument(int) threads=48; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10010, Details: Argument(int) threads=49; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10010, Details: Argument(int) threads=49; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:07:14 Event Fired: 30000, Details: Argument(string) toaddress=jktieman@tiemanworld.com; Argument(string) emailaddress=jktieman@tiemanworld.com; Argument(string) todomain=tiemanworld.com; Argument(string) fromaddress=20140913035712718cbadd0ac54fa6b5ebb716c4a8ba8a@bounces.amazon.com; Argument(string) fromdomain=bounces.amazon.com; Argument(string) subject=Amazon Payments: Annual Notice; Argument(string) spamlevel=none; Argument(int) sizekb=4; Argument(bool) intradomain=False; Argument(Complex) spoolmessage=SmarterTools.SmarterMail.RelayServer.SpoolMessage; Argument(DateTime) eventoccured=9/13/2014 4:07:14 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:07:50 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:07:50 AM; Argument(DayOfWeek) dayofweek=Saturday
 
Does anyone have a key to the SmarterMail / SmarterTools event log and what the event number pertain to?
 
Does anyone have any suggestions which might resolve these logged errors?
 
Bruce Barnes
ChicagoNetTech Inc

Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting

4 Replies

Reply to Thread
1
Robert Emmett Replied
October 13, 2014 at 7:48 AM
Employee Post
These event ids pertain to certain system admin event types:
 
10002 - SpoolCount
10009 - Memory
10010 - Threads
 
They are not errors.  Those logs should have been removed before the minor release.  They are intended only for debugging/troubleshooting purposes.
Robert Emmett
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Bruce Barnes Replied
October 13, 2014 at 7:56 AM
Thanks for the quick response.
Bruce Barnes
ChicagoNetTech Inc

Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
1
Steve Reid Replied
October 14, 2014 at 5:16 AM
Not sure why this is marked not a problem when it's clear whoever compiled the minor release did it wrong.
 
Please make sure you are marking things appropriately.
0
Tim Uzzanti Replied
October 14, 2014 at 7:56 AM
Employee Post
Steve,
 
It seems sometimes you have a bad day and then decide to participate in the community...  and then I feel obligated to tell you when your talking out your backside.
 
This has nothing to do with "who compiled" or "a build" etc.  As Robert mentioned, DCOM issues are system level issues and most likely the machine might need a reboot because of some core OS memory leak, security issues, component problem etc.  Sometimes its as simple as a component that is no longer properly registered and loading properly etc.
 
Thanks,
 
Tim
Tim Uzzanti
CEO
SmarterTools Inc.
(877) 357-6278
www.smartertools.com

Reply to Thread