ESJ 41 Reputation points

I am trying to understand what HARECEIVE and HADISCARD means. I have read multiple articles and I dont get it.
I have some emails sent to one particular mailbox in Exchange 2016 , and in message tracking log, the only 2 event IDs for the emails are HARECEIVE and HADISCARD . Source is SMTP.
So what exactly happened to that email.


Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,429 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. LilyLi2-MSFT 1,981 Reputation points

    Hi @ESJ ,

    1.Were these emails delivered successfully? Or discarded?
    2.Did you send emails to the particular mailbox in bulk?

    These are the event types in the message tracking log:

    • HARECEIVE means a shadow message was received by the server in the local database availability group (DAG) or Active Directory site.
    • HADISCARD means a shadow message was discarded after the primary copy was delivered to the next hop.

    For more information, please see Shadow redundancy in Exchange Server.

    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    2 people found this answer helpful.