| Event Id | 3368 |
| Source | MsExchangeIS |
| Description | |
| Event Information | Event ID 3368 is the event that the Information Store (IS) logs when the
signature of a transaction log doesnt match the associated database. Each
transaction log and database file has a signature that contains identifying
information, and the transaction logs and databases signatures must match. This
requirement prevents you from playing back a set of log files from database A
against database B. The IS must be running for you to mount the databases, but
if you start the IS when no databases or logs are present, the action will
create a new set of empty databases and a new generation of log files. If you
restore the database after getting these empty files, when you try to mount your
restored database, it wont match the log files and youll receive this error. To eliminate this problem, make sure that your online backup includes log files; that way, youll get a consistent set of logs that match the database when you restore the databases. If you cant restore your log files, follow these steps: 1. Make a new online backup, even if the IS is damaged. This action truncates the logs. 2. Stop the IS. Delete the databases and log files. 3. Restart the IS to create new, empty databases and log files. 4. Remove the newly created log files from the log file directory. 5. Restore your databases from a good backup (not necessarily the one you made in Step 1). |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.