How to find out the reason for the message delay

Михаил Андросов 396 Reputation points
2022-04-19T11:41:56.657+00:00

We use the Exchange 2013 infrastructure.
On the edge server, I noticed that there is a delay in transmitting a message to the mail system:
For example, Get-MessageTrackingLog:
Timestamp : 15.04.2022 11:47:37
Sender : ******@i-nvr.ru
Recipients : {mdolgushina@Company portal .ru}
MessageSubject : FOMS-70523 23 to 11
EventId : RECEIVE
MessageId : <domain.105089.1650008397000.29497.1650012425040@keyman .com>
Reference :

Timestamp : 15.04.2022 11:47:37
Sender : ******@i-nvr.ru
Recipients : {mdolgushina@Company portal .ru}
MessageSubject : FOMS-70523 23 to 11
EventId : DEFER
MessageId : <domain.105089.1650008397000.29497.1650012425040@keyman .com>
Reference :

Timestamp : 15.04.2022 12:02:41
Sender : ******@i-nvr.ru
Recipients : {mdolgushina@Company portal .ru}
MessageSubject : FOMS-70523 23 to 11
EventId : SEND
MessageId : <domain.105089.1650008397000.29497.1650012425040@keyman .com>

How can I find out the reason for the DEFER state?

Exchange | Exchange Server | Management
{count} votes

Accepted answer
  1. Andy David - MVP 157.5K Reputation points MVP Volunteer Moderator
    2022-04-19T15:32:54.13+00:00

    After a month I wouldnt think so. However check to see how much space is avail and add if necessary.
    You can also recreate the mail.que to free up space.

    I do this every once in awhile. Safe and easy:
    https://techcommunity.microsoft.com/t5/exchange-team-blog/transport-database-understand-size-and-troubleshoot/ba-p/1113388

    If there is no other drive available to move the transport database, you can recreate the database so that the immediate problem is resolved. And to ensure, there is no data loss, we must make sure there is no email waiting in the queue to be sent out. The steps are mentioned below:

    Failover Exchange databases to a different server to avoid downtime for submission from local databases
    Pause the Microsoft Exchange Transport Service
    Run the Get-queue command on the Exchange server and make sure that all messages have been processed and no email is stuck in the queue.
    Make sure no other servers have shadow messages waiting for this server (otherwise they would get delivered again). You can run the following command to see all the shadow queues for a particular server:

    get-transportserver | get-queue | ?{$.deliveryType -eq "ShadowRedundancy" -and $.NextHopDomain -eq "Servername"}

    Stop the Microsoft Exchange Transport and Microsoft Exchange Frontend Transport services
    Navigate to queue folder path and rename it to something like QueueOld
    Start the Microsoft Exchange Transport and Microsoft Exchange Frontend Transport services
    A new queue folder would be created, make sure that Application event ID 7005 has appeared: "A new database file mail.que has been created."
    If the transport service starts successfully, you can move the QueueOld to a different location for backup and delete it later.

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Andy David - MVP 157.5K Reputation points MVP Volunteer Moderator
    2022-04-19T14:00:00.267+00:00

    Try:

    Get-MessageTrackingLog -recipients ******@contoso.ru -Start "2022/04/15 0:00" -end "2022/04/19 12:00" -sender ******@i-nvr.ru -EventID DEFER | Select-Object RecipientStatus
    
    0 comments No comments

  2. Михаил Андросов 396 Reputation points
    2022-04-19T14:51:34.067+00:00

    A message is displayed:
    {452 4.3.1 Insufficient system resources}
    I suspected that it was a lack of resources. But on April 15th I didn't see any error messages on the Exchange server. I only found a message from a month ago on the Exchange server:
    Source: MSExchangeTransport
    ID: 15006
    Microsoft Exchange Transport is rejecting message submissions because the available disk space has dropped below the configured threshold.

    The following resources are under pressure:
    Queue database logging disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue\") = 97% [Medium] [Normal=95% Medium=97% High=99%]
    Temporary Storage disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp") = 97% [Medium] [Normal=95% Medium=97% High=99%]

    The following components are disabled due to back pressure:
    Inbound mail submission from the Internet
    Mail submission from Pickup directory
    Mail submission from Replay directory
    Content aggregation
    Mail resubmission from the Message Resubmission component.
    Mail resubmission from the Shadow Redundancy Component

    The following resources are in normal state:
    Queue database and disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue\mail.que") = 95% [Normal] [Normal=95% Medium=97% High=99%]
    Version buckets = 1 [Normal] [Normal=1750 Medium=2000 High=2500]
    Private bytes = 3% [Normal] [Normal=71% Medium=73% High=75%]
    Physical memory load = 57% [limit is 94% to start dehydrating messages.]
    Submission Queue = 0 [Normal] [Normal=2000 Medium=10000 High=15000]
    Is this message from a month ago the reason for the delays that are now occurring?

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.