Event ID - 3368

Event Id3368
SourceMsExchangeIS
Description
Event InformationEvent ID 3368 is the event that the Information Store (IS) logs when the signature of a transaction log doesnt match the associated database. Each transaction log and database file has a signature that contains identifying information, and the transaction logs and databases signatures must match. This requirement prevents you from playing back a set of log files from database A against database B. The IS must be running for you to mount the databases, but if you start the IS when no databases or logs are present, the action will create a new set of empty databases and a new generation of log files. If you restore the database after getting these empty files, when you try to mount your restored database, it wont match the log files and youll receive this error.

To eliminate this problem, make sure that your online backup includes log files; that way, youll get a consistent set of logs that match the database when you restore the databases. If you cant restore your log files, follow these steps:

1. Make a new online backup, even if the IS is damaged. This action truncates the logs.
2. Stop the IS. Delete the databases and log files.
3. Restart the IS to create new, empty databases and log files.
4. Remove the newly created log files from the log file directory.
5. Restore your databases from a good backup (not necessarily the one you made in Step 1).
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.