Announcement

Collapse
No announcement yet.

Scheduled Task to Send Large email Warning.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Scheduled Task to Send Large email Warning.

    Hello,

    I have been trying to setup a scheduled task to send me a Email that contains the users name when we get a large email (10MB limit) stuck in a users mailbox. The Event is triggered by the Event 210 Source:Windows Small business Server 2008.

    Now I have read the thing where they show you how to pull the custom vaules though to the email, I can get it to report anything under the System entrys, but am unable to pull any info from the userdata section.

    Below is the Task that I am trying to get working, and all the calls work except for the UserData one.

    Code:
    <?xml version="1.0" encoding="UTF-16"?>
    <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
    <RegistrationInfo>
    <Date></Date>
    <Author></Author>
    <Description></Description>
    </RegistrationInfo>
    <Triggers>
    <EventTrigger>
    <Enabled>true</Enabled>
    <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="Microsoft-Windows-Small Business Server/Operational"&gt;&lt;Select Path="Microsoft-Windows-Small Business Server/Operational"&gt;*[System[Provider[@Name='Windows Small Business Server 2008'] and EventID=210]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
    <ValueQueries>
    <Value name="eventChannel">Event/System/Channel</Value>
    <Value name="eventRecordID">Event/System/EventRecordID</Value>
    <Value name="eventSeverity">Event/System/Level</Value>
    <Value name="eventUser">UserData/EventData/String1Data</Value>
    </ValueQueries>
    </EventTrigger>
    </Triggers>
    <Principals>
    <Principal id="Author">
    <UserId></UserId>
    <LogonType></LogonType>
    <RunLevel>HighestAvailable</RunLevel>
    </Principal>
    </Principals>
    <Settings>
    <IdleSettings>
    <Duration>PT10M</Duration>
    <WaitTimeout>PT1H</WaitTimeout>
    <StopOnIdleEnd>true</StopOnIdleEnd>
    <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
    <Priority>7</Priority>
    </Settings>
    <Actions Context="Author">
    <SendEmail>
    <Server>192.168.0.5</Server>
    <Subject>Large Email</Subject>
    <To></To>
    <From>minu</From>
    <Body>There is a large email stuck in someones mail box. Please log onto the server and check the Pop3 log. 
    User = $(eventUser)
    Record ID = $(eventRecordID)
    Log = $(eventChannel)
    Severity = $(eventSeverity)
    </Body>
    <HeaderFields />
    </SendEmail>
    </Actions>
    </Task>

    Thank you for any help.

    Wofen
    Good to be back....

  • #2
    Re: Scheduled Task to Send Large email Warning.

    Ummm, so I should take it is not possible/practical to send User Details in a automated email

    Wofen
    Good to be back....

    Comment


    • #3
      Re: Scheduled Task to Send Large email Warning.

      can you post the XML of the event?
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: Scheduled Task to Send Large email Warning.

        Sure can, The bolded section is the section that I am trying to pull out. It should be "UserData\EventData\String1Data", but that does not work

        Code:
        - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
        - <System>
        <Provider Name="Windows Small Business Server 2008" Guid="{8a6cc93f-8047-4f7a-94ae-aabb0a1e3efa}" /> <EventID>210</EventID> <Version>0</Version> <Level>2</Level> <Task>3</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-06-10T02:08:44.837Z" /> <EventRecordID>148768</EventRecordID>
        <Correlation />
        <Execution ProcessID="3068" ThreadID="11336" /> <Channel>Microsoft-Windows-Small Business Server/Operational</Channel> <Computer>Server.Domain.local</Computer>
        <Security UserID="S-1-5-19" />
        </System>
        - <UserData>
        - <EventData xmlns:auto-ns1="http://schemas.microsoft.com/win/2004/08/events" xmlns="logging"> <Int1Data>1</Int1Data> <String1Data>[email protected]</String1Data>
        <String2Data>pop.Domain.com.au</String2Data>
        <Int2Data>27938850</Int2Data>
        </EventData>
        </UserData>
        </Event>
        Thanks for any help,

        Wofen
        Good to be back....

        Comment


        • #5
          Re: Scheduled Task to Send Large email Warning.

          How about starting from the outside of the XML and trying:
          <Value name="eventUser">Event/UserData/EventData/String1Data</Value>
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Scheduled Task to Send Large email Warning.

            Well, its not a miss placed bracket, but its almost as annoying.

            I can NOT CONFIRM this works (I can not send large emails ATM, so have to wait), but it makes sense. Once I can confirm I will post back here with the results.

            Thanks Ossian,

            Wofen
            Good to be back....

            Comment


            • #7
              Re: Scheduled Task to Send Large email Warning.

              Tested and confirmed that it does NOT work

              CRY!

              If anyone has any ideas, I would love to get this working, and failed me!

              Wofen
              Good to be back....

              Comment


              • #8
                Re: Scheduled Task to Send Large email Warning.

                Any error information?
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Scheduled Task to Send Large email Warning.

                  Nope, it sends the email, it just does not inculd the Username (it just says User = $(eventUser) in the body of the email, rather then the actuly data.

                  Its a odd one, as I can get all infomation OTHER then what I want

                  Wofen
                  Good to be back....

                  Comment

                  Working...
                  X