RPC/Sec is showing around 600, and the default warning is 5 why? (4340571)

Spotlight on Exchange is showing the primary back-end Exchange Server RPC/Sec of around 600 but the default warning is 5, why?.

The warning for MSExchangeIS\RPC Operations/sec doesn't mean an immediate problem. This just means that a lot of MAPI workload is happening right now which could indicate 3rd party software calls through MAPI. Refer to the articles below

Performance troubleshooting basics: http://msexchangeteam.com/archive/2005/09/28/411674.aspx

Performance data from RPC Operations/sec counter: http://www.microsoft.com/technet/prodtechnol/exchange/Analyzer/012ff496-8b77-4395-8d2d-f398100b8818.mspx?mfr=true

Some other counters like MSExchangeIS\RPC Averaged Latency or MSExchangeIS\RPC Requests may be also checked in this situation.

Identifying Slow RPC Request Processing: http://www.microsoft.com/technet/prodtechnol/exchange/guides/TrblshtE2k3Perf/c424f3a2-fda6-447c-86d2-0a2983825620.mspx?mfr=true

A Microsoft document was used that had recommendations for this counter and arrived at the threshold via that document and lab testing.

Best Practices for Monitoring Exchange: http://www.microsoft.com/technet/itsolutions/msit/operations/monittsb.mspx#EOGAC