MS Exchange has built-in, automatic maintenance tasks. All the information from completion of those tasks is dumped into the Windows Application log with a Level of "Information". Is there any way to get those into LEM for reporting/summarization?
We do have an Exchange Event Log connector - try turning it on on your Exchange agent and see if it pulls in what you need. It's called "Microsoft Exchange Application Log" and it's in the category "Network Services" (or search for exchange).
I did configure that connector, but the information I am looking for is in an "Informational" event message generated by System Attendant. The connector doesn't pick them up, only Warning and Error events.
We should be able to add them to the existing connector if they are of interest - if you can provide an evtx either to me or file a support case we'll take a look. Chances are they were changed/added/improved in newer versions of Exchange and we just never had a request to pull them in.
I am interested in EventID 9017, 9018 generated from source MSExchange Assistants and 10027 generated from source MSExchangeMailboxAssistants. Basically, they are summary events of exchange database maintenance tasks. It would be handy to see those daily.
Can you export some of those events from your Exchange server as EVTX and attach them here or open a support ticket with the info so a connector request can be made?
