Event ID - 9312

Event Id9312
SourceMSExchangeSA
DescriptionThe Microsoft Exchange System Attendant was stopped while message tracking information was being written. Some message tracking information was lost.
Event InformationAccording To Microsoft:
Cause:

This event is rare. It indicates that the Microsoft Exchange System Attendant stopped while logging message tracking information. Some message tracking information might have been lost.
This is a very rare event. It occurs when there is a backlog of tracking events to be written to the message tracking log and the Exchange System Attendant service is shut down. Although a relatively rate Event, it is possible under high Active Directory load conditions.

Resolution:
Lost message tracking data cannot be recovered. The reason for the high Active Directory load must be investigated.
Reference LinksMicrosoft product: Exchange Version: 6.5.0000.0 Event Source: MSExchangeSA Event ID: 9312

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.