In Exchange 2007 we got the following Event ID alerts for 10107 and 10108 if a user was causing lots of transaction logs. We then triggered on those alerts with SCOM.
http://support.microsoft.com/kb/972705
We're looking to do that with Exchange 2010, but not able to do so. How can we see which users are causing transaction log abnormal growth.?
Thanks
d