Incoming emails with attachments are delayed between 5 minutes and several hours

Question

Hi, I'm running Exchange Server 2016 and emails with attachments take a long time to arrive. Internal emails are very quick. The problem is receieving external emails. Sometimes they take as little as 5 minutes which is great. However, sometimes they can take over an hour, sometime more.

Here's a screenshot of the message tracking log. I started writing the time the message was sent in the subject. The message sent at 16.22 only took 8 minutes to arrive which I'm happy with. The next email I sent at 16.41 didn't arrive until 18.06.

The source is SMTP so does that mean the delay caused by the gmail server or mine?

Answer 1

If you see delays in your message tracking logs, then its your servers that are having the issues.

Do you have more than one server or doing some forwarding?

Why is the message received and sent twice?

Answer 2

Just the one server.

Is it possible to edit my original post so I can remove the machine name from the screenshot?

Answer 3

It only gets these fields:

Timestamp, EventID, source, sender, receipents, messagesubject

I've tried outputting it to a text file bit it still ends at "messagesubject". I'm looked through the documentation on Get-MessageTrackingLog.

Answer 4

Get-MessageTrackingLog -MessageId "******@contoso.com" | FL 

Answer 5

The email was sent from Gmail at 16:41

[PS] C:\Windows\system32>Get-MessageTrackingLog -MessageId "masked@Monique gmx .gma
il.com" | FL
Creating a new session for implicit remoting of "Get-MessageTrackingLog" command...

RunspaceId : 5ce063cc-e509-4684-a73b-de610b700a02
Timestamp : 02/12/2021 18:06:53
ClientIp :
ClientHostname :
ServerIp :
ServerHostname : MAILGATE
SourceContext : No suitable shadow servers
ConnectorId :
Source : SMTP
EventId : HAREDIRECTFAIL
InternalMessageId : 98895916957696
MessageId : <masked@Monique gmx .gmail.com>
NetworkMessageId : 90c464d5-a0da-4abb-bfa3-08d9b5bda3ec
Recipients : {photos@keyman .com}
RecipientStatus : {}
TotalBytes : 7652989
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : sending 1641 for track
Sender : masked@Stuff .com
ReturnPath : masked@Stuff .com
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData : {[DeliveryPriority, Normal], [AccountForest, domain.com]}
TransportTrafficType : Email
SchemaVersion : 15.01.2176.012

RunspaceId : 5ce063cc-e509-4684-a73b-de610b700a02
Timestamp : 02/12/2021 18:06:53
ClientIp : 192.168.1.14
ClientHostname : host.domain.com
ServerIp : 192.168.1.14
ServerHostname : MAILGATE
SourceContext : 08D9A0852AF44B2B;2021-12-02T18:00:35.344Z;0
ConnectorId : MAILGATE\Default MAILGATE
Source : SMTP
EventId : RECEIVE
InternalMessageId : 98895916957698
MessageId : <CALd+o-U+iZJMTwgjeJUEoQT=dA238XEMRZ7Gk9-U0dk+UL7kvg@Monique gmx .gmail.com>
NetworkMessageId : 90c464d5-a0da-4abb-bfa3-08d9b5bda3ec
Recipients : {photos@keyman .com}
RecipientStatus : {}
TotalBytes : 7653396
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : sending 1641 for track
Sender : masked@Stuff .com
ReturnPath : masked@Stuff .com
Directionality : Incoming
TenantId :
OriginalClientIp : 209.85.208.47
MessageInfo : 0cA:
MessageLatency :
MessageLatencyType : None
EventData : {[ProxyHop1, host.domain.com(192.168.1.14)], [MessageValue, MediumHigh],
[Replication, Failed], [FirstForestHop, host.domain.com], [FromEntity, Internet],
[ProxiedClientIPAddress, 209.85.208.47], [ProxiedClientHostname, mail-ed1-f47.google.com],
[DeliveryPriority, Normal], [AccountForest, domain.com]}
TransportTrafficType : Email
SchemaVersion : 15.01.2176.012

RunspaceId : 5ce063cc-e509-4684-a73b-de610b700a02
Timestamp : 02/12/2021 18:06:57
ClientIp : 192.168.1.14
ClientHostname : MAILGATE
ServerIp : 192.168.1.14
ServerHostname : host.domain.com
SourceContext : ;250 2.0.0 OK <CALd+o-U+iZJMTwgjeJUEoQT=dA238XEMRZ7Gk9-U0dk+UL7kvg@Monique gmx .gmail.com>
[Hostname=host.domain.com];ClientSubmitTime:
ConnectorId : Intra-Organization SMTP Send Connector
Source : SMTP
EventId : SEND
InternalMessageId : 98895916957698
MessageId : <CALd+o-U+iZJMTwgjeJUEoQT=dA238XEMRZ7Gk9-U0dk+UL7kvg@Monique gmx .gmail.com>
NetworkMessageId : 90c464d5-a0da-4abb-bfa3-08d9b5bda3ec
Recipients : {photos@keyman .com}
RecipientStatus : {250 2.1.5 Recipient OK}
TotalBytes : 7654878
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : sending 1641 for track
Sender : masked@Stuff .com
ReturnPath : masked@Stuff .com
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo : 2021-12-02T18:00:35.164Z;LSRV=host.domain.com:TOTAL-HUB=382.195|SMR=378.159(SMRDE=377.
641(SMRED=0.001(SMRED-SMSMSESMTPAgent=0.001))|SMRC=0.517(SMRCL=0.516))|CAT=1.318(CATOS=0.530(
CATSM=0.526(CATSM-Unified Group Post Sent Item Routing Agent=0.015|CATSM-SMSMSERoutingAgent=0
.510))|CATRESL=0.006|CATORES=0.779(CATRS=0.779(CATRS-DLP Policy Agent=0.017|CATRS-Index
Routing Agent=0.761)))|UNK=0.003|QDM=0.020|SMSC=0.014(X-SMSDR=0.019)|SMS=2.678(SMSMBXD=2.310)
MessageLatency : 00:06:22.3900000
MessageLatencyType : LocalServer
EventData : {[E2ELatency, 382.390], [MsgRecipCount, 1], [IncludeInSla, False], [SlaExclusionReason,
AccMsgSizeThresholdExceeded],
[Microsoft.Exchange.Transport.MailRecipient.RequiredTlsAuthLevel, Opportunistic],
[IsSmtpResponseFromExternalServer, False], [DeliveryPriority, Low], [PrioritizationReason,
AMS:7653396/1048576|ARC:2/50], [AccountForest, domain.com]}
TransportTrafficType : Email
SchemaVersion : 15.01.2176.012

RunspaceId : 5ce063cc-e509-4684-a73b-de610b700a02
Timestamp : 02/12/2021 18:06:57
ClientIp :
ClientHostname : host.domain.com
ServerIp :
ServerHostname : MAILGATE
SourceContext : 08D9A08562C4208C;2021-12-02T18:06:55.244Z;ClientSubmitTime:
ConnectorId :
Source : STOREDRIVER
EventId : DELIVER
InternalMessageId : 98895916957698
MessageId : <CALd+o-U+iZJMTwgjeJUEoQT=dA238XEMRZ7Gk9-U0dk+UL7kvg@Monique gmx .gmail.com>
NetworkMessageId : 90c464d5-a0da-4abb-bfa3-08d9b5bda3ec
Recipients : {photos@keyman .com}
RecipientStatus : {}
TotalBytes : 7654878
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : sending 1641 for track
Sender : masked@Stuff .com
ReturnPath : masked@Stuff .com
Directionality : Incoming
TenantId :
OriginalClientIp : 209.85.208.47
MessageInfo : 2021-12-02T18:00:35.164Z;SRV=host.domain.com:TOTAL-FE=0.193|SMR=0.176(SMRPI=0.012(SMRP
I-FrontendProxyAgent=0.012))|SMS=0.017;SRV=host.domain.com:TOTAL-HUB=379.517|SMR=378.1
59(SMRDE=377.641(SMRED=0.001(SMRED-SMSMSESMTPAgent=0.001))|SMRC=0.517(SMRCL=0.516
))|CAT=1.318(CATOS=0.530(CATSM=0.526(CATSM-Unified Group Post Sent Item Routing Agent=0.015
|CATSM-SMSMSERoutingAgent=0.510))|CATRESL=0.006|CATORES=0.779(CATRS=0.779(CATRS-DLP Policy
Agent=0.017 |CATRS-Index Routing Agent=0.761)))|QDM=0.039;SRV=host.domain.com:TOTAL-DE
L=2.673|SMR=0.367(SMRDI=0.367)|SDD=2.304(SDDSPCR=0.192(SDDCC=0.192)|SDDSPCS=0.022(SDDOS=0.003
)|SDDPM=0.220(SDDPM-Conversations Processing Agent=0.003|SDDPM-People I Know Classification
Agent=0.001|SDDPM-Mailbox Rules Agent=0.005|SDDPM-Index Delivery
Agent=0.208)|SDDSCMG=1.409(SDDCMM=0.003)|SDDCM=0.005(SDDCM-Message Records Management
Delivery Agent=0.004)|SDDSDMG=0.450(SDDR=0.450)|SDDDS=0.001|X-SDDAD=0.007|X-SDDS=1.396)
MessageLatency : 00:06:22.3850000
MessageLatencyType : EndToEnd
EventData : {[IncludeInSla, False], [SlaExclusionReason, AccMsgSizeThresholdExceeded],
[MailboxDatabaseGuid, 9f003372-06b9-49ed-8053-d62fd8153579], [Mailboxes,
69425ba2-5852-4faf-923b-8ca29ae380a4], [StoreObjectIds, AAAAAN/ssDyFvSZJvI5uSflSxzIHACRnk/gYJ
Y9Gu+wvN7MTeVgAAAAAAQwAACRnk/gYJY9Gu+wvN7MTeVgAAAAAESQAAA==], [FromEntity, Internet],
[ToEntity, Hosted], [P2RecipStat, 0.193/1], [MsgRecipCount, 1], [DeliveryLatency, 382.383],
[AttachCount, 2], [E2ELatency, 382.385], [DeliveryPriority, Low], [PrioritizationReason,
AMS:7653396/1048576|ARC:2/50], [AccountForest, domain.com]}
TransportTrafficType : Email
SchemaVersion : 15.01.2176.012