Event ID - 9312

Event Id9312
DescriptionThe Microsoft Exchange System Attendant was stopped while message tracking information was being written. Some message tracking information was lost.
Event InformationAccording To Microsoft:

This event is rare. It indicates that the Microsoft Exchange System Attendant stopped while logging message tracking information. Some message tracking information might have been lost.
This is a very rare event. It occurs when there is a backlog of tracking events to be written to the message tracking log and the Exchange System Attendant service is shut down. Although a relatively rate Event, it is possible under high Active Directory load conditions.

Lost message tracking data cannot be recovered. The reason for the high Active Directory load must be investigated.
Reference LinksMicrosoft product: Exchange Version: 6.5.0000.0 Event Source: MSExchangeSA Event ID: 9312

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.