2
Excessive Events in SmarterMail
Problem reported by Bruce Barnes - 10/12/2014 at 7:21 AM
Not A Problem
I am working on a case with a mutual customer who is seeing in excess of 4,400 events per day in his SmarterMail events log.
 
The customer is running SmarterMail 10.7.4842, on Windows Server 2008 R2 Datacenter, 64 bit.
 
Client's Server Configuration
Client's Server Configuration
 
The events, 10010, 10002, and 10009, repeat themselves every minute.
 
Here is a small sample of the events which continually repeat themselves:
 
00:00:47 Event Fired: 10009, Details: Argument(int) memorymbused=248; Argument(int) memorymbmax=4095; Argument(int) memorypercent=6; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:00:47 Event Fired: 10010, Details: Argument(int) threads=47; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:00:47 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:00:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:01:47 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:01:47 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:02:48 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:02:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10010, Details: Argument(int) threads=46; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:03:48 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:03:48 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:34 Event Fired: 10003, Details: Argument(int) uptimedays=98; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:34 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10009, Details: Argument(int) memorymbused=246; Argument(int) memorymbmax=4095; Argument(int) memorypercent=6; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10010, Details: Argument(int) threads=48; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:04:49 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:04:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10010, Details: Argument(int) threads=49; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:05:49 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:05:49 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10010, Details: Argument(int) threads=49; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:06:50 Event Fired: 10002, Details: Argument(int) spoolcount=0; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:06:50 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:07:14 Event Fired: 30000, Details: Argument(string) toaddress=jktieman@tiemanworld.com; Argument(string) emailaddress=jktieman@tiemanworld.com; Argument(string) todomain=tiemanworld.com; Argument(string) fromaddress=20140913035712718cbadd0ac54fa6b5ebb716c4a8ba8a@bounces.amazon.com; Argument(string) fromdomain=bounces.amazon.com; Argument(string) subject=Amazon Payments: Annual Notice; Argument(string) spamlevel=none; Argument(int) sizekb=4; Argument(bool) intradomain=False; Argument(Complex) spoolmessage=SmarterTools.SmarterMail.RelayServer.SpoolMessage; Argument(DateTime) eventoccured=9/13/2014 4:07:14 AM; Argument(DayOfWeek) dayofweek=Saturday;
00:07:50 Event Fired: 10009, Details: Argument(int) memorymbused=245; Argument(int) memorymbmax=4095; Argument(int) memorypercent=5; Argument(string) servername=189912-3; Argument(DateTime) eventoccured=9/13/2014 4:07:50 AM; Argument(DayOfWeek) dayofweek=Saturday
 
Does anyone have a key to the SmarterMail / SmarterTools event log and what the event number pertain to?
 
Does anyone have any suggestions which might resolve these logged errors?
 
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net

Phonr: (773) 491-9019
Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting

5 Replies

Reply to Thread
1
Employee Replied
Employee Post
These event ids pertain to certain system admin event types:
 
10002 - SpoolCount
10009 - Memory
10010 - Threads
 
They are not errors.  Those logs should have been removed before the minor release.  They are intended only for debugging/troubleshooting purposes.
0
Bruce Barnes Replied
Thanks for the quick response.
Bruce Barnes ChicagoNetTech Inc brucecnt@comcast.net Phonr: (773) 491-9019 Phone: (224) 444-0169 E-Mail and DNS Security Specialist Network Security Specialist Customer Service Portal: https://portal.chicagonettech.com Website: https://www.ChicagoNetTech.com Security Blog: http://networkbastion.blogspot.com/ Web and E-Mail Hosting, E-Mail Security and Consulting
1
Steve Reid Replied
Not sure why this is marked not a problem when it's clear whoever compiled the minor release did it wrong.
 
Please make sure you are marking things appropriately.
0
Tim Uzzanti Replied
Employee Post
Steve,
 
It seems sometimes you have a bad day and then decide to participate in the community...  and then I feel obligated to tell you when your talking out your backside.
 
This has nothing to do with "who compiled" or "a build" etc.  As Robert mentioned, DCOM issues are system level issues and most likely the machine might need a reboot because of some core OS memory leak, security issues, component problem etc.  Sometimes its as simple as a component that is no longer properly registered and loading properly etc.
 
Thanks,
 
Tim
Tim Uzzanti CEO SmarterTools Inc. www.smartertools.com
0
Steve Reid Replied
Robert said: "Those logs should have been removed before the minor release"

That is pretty clear that there is a problem.

Reply to Thread