| #

## System Events

A brief description of the system events options is available below (Alerts → System Events).
Click an event link to configure the alert notification. For details on the notification settings, see Alert Notification Settings.

#### System Events

Event | Description
--- | ---
ScanMail Services
ScanMail service did not start successfully | ScanMail service was not started successfully.
ScanMail service is unavailable | ScanMail for Microsoft Exchange Master Services stopped unexpectedly.
ScanMail Events
Smart Protection Server - Each time File Reputation service was | Select to receive an alert each time the Smart Protection Server is available or unavailable.
Smart Protection Server - Each time Web Reputation service was | Select to receive an alert each time the Smart Protection Server is available or unavailable.
Virtual Analyzer - Each time the Virtual Analyzer server was | Select to receive an alert each time the Analyzer server is available or unavailable.
Update - Each time update was | Select to receive an alert each time an update is successful or unsuccessful.
Update - Last update time is older than | Select to receive an alert each time the last update time is older than the time you specify.
Manual/Scheduled scan tasks were | Select to receive an alert each time the scan tasks are successful or unsuccessful.
| ##### Note This option does not display for Exchange Server 2010 Edge/Hub Transport server roles.
Manual/Scheduled scan time exceeds | Select to receive an alert each time the time to perform scan tasks exceeds the time you specify.
| ##### Note This option does not display for Exchange Server 2010 Edge/Hub Transport server roles.
Search & Destroy - Each time a search was
| ##### Note This alert only appears after activating the Search & Destroy feature.
| Select to receive an alert each time a Search & Destroy mailbox search is successful or unsuccessful.
The local drive (volume) space for the backup, quarantine, and archive directories is less than | Select to receive an alert each time the available disk space reaches the minimum you specify.
The quarantine and log database size exceeds
| ##### Note This alert only appears before activating the Search & Destroy feature.
| Select to receive an alert each time the size of the database grows larger than the size you specify.
The size of the database for quarantine, logs, and mailbox search results exceeds
| ##### Note This alert only appears after activating the Search & Destroy feature.
| Select to receive an alert each time the size of the database grows larger than the size you specify.
Outbreak Prevention Mode started successfully | Control Manager puts ScanMail in Outbreak Prevention Mode.
| ##### Note If ScanMail is not registered to Control Manager this does not display
Outbreak Prevention Mode stopped and restored configuration successfully | ScanMail is no longer in Outbreak Prevention Mode.
| ##### Note If ScanMail is not registered to Control Manager this does not display
Exchange Events
The SMTP messages queued continuously exceeds the following number within the specified time | Select to receive an alert each time the SMTP messages queued exceeds the number you specify within a time frame.
| ##### Note This option does not display for Exchange Server 2010 mailbox server roles.
The disk space on the local drive of the transaction log is less than | Select to receive an alert each time the available disk space reaches the minimum you specify.
| ##### Note This option does not display for Exchange Server 2010 Edge/Hub Transport server roles.
The mail store size exceeds | Select to receive an alert each time the mail store size exceeds the size you specify.
| ##### Note This option does not display for Exchange Server 2010 Edge/Hub Transport server roles.

| ##### Note To use System Center Operations Manager (SCOM), install the management pack found in the ScanMail installation package and select Write to Windows event log in each individual alert setting. Exchange events do not integrate with System Center Operations Manager (SCOM).