When you implement Exchange journaling, the content-identifer (PR_CONTENT_IDENTIFIER) of the journal messages are expected to be "ExjournalData", or with envelope journaled messages "ExjournalReport" This header "Content-Identifier" is misspelled in Exchange