Sometimes I just love linux even more. Message tracking and just plain logging in Exchange is just unbearable. I love the way it is so simple to get right to the problem a linux system. <\/p>\n
Determining what has happened to message in Exchange is just a nightmare. It seems even worse in Exchange 2013, but I know there is a lot of information there. It would just be nice to see a simple standards based SMTP type of log. I have yet to stumble on it in the mountain of logging options in EMS. <\/p>\n
First, you have to set the event log level. At least, I believe you do. Regardless, it is something to note here, because it could useful for troubleshooting other kind of issues.<\/p>\n
To check the current event log levels:<\/p>\n
[PS] C:\\>Get-EventLogLevel<\/p><\/blockquote>\n
I highly recommend piping this out to more, because there are a lot of them. By default, almost all of the log levels are set to Lowest. <\/p>\n
To change a log level:<\/p>\n
[PS] C:\\>Set-EventLogLevel -Identity identityname<\/em> -Level newlevel<\/em><\/p><\/blockquote>\n
For example:<\/p>\n
[PS] C:\\>Set-EventLogLevel -Identity MSExchangeTransport\\SmtpReceive<\/em> -Level High<\/em><\/p><\/blockquote>\n
To change the retention in days of the logs. The default is 30 days.:<\/p>\n
Set-TransportServer -Identity MY-SERVER -MessageTrackingLogMaxAge 90<\/p><\/blockquote>\n
Other options include:<\/p>\n
MessageTrackingLogMaxDirectorySize (for example: 1000 MB)
\nMessageTrackingLogMaxFileSize (for example: 10 MB)
\nMessageTrackingLogPath (for example: L:\\ExchangeLogs)<\/p><\/blockquote>\n[PS] C:\\>get-messagetrackinglog -start “6\/6\/2014 10:00:00” -end “6\/17\/2014 23:59” -recipient “recipientemailaddress” -sender “senderemailaddress” | format-list | more<\/p>\n
If you get a log of output, you may need to use ResultSize to increase the number of items listed. Also, you can use Select to selectively choose your display columns:<\/p>\n
[PS] C:\\>get-messagetrackinglog -start “6\/6\/2014 10:00:00” -end “6\/17\/2014 23:59” -EventID RECEIVE -ResultSize 10000 -recipient “recipientemailaddress” -sender “senderemailaddress” | Select Recipients,Sender,MessageSubject,TimeStamp<\/p>\n","protected":false},"excerpt":{"rendered":"
Sometimes I just love linux even more. Message tracking and just plain logging in Exchange is just unbearable. I love the way it is so simple to get right to the problem a linux system. Determining what has happened to message in Exchange is just a nightmare. It seems even worse in Exchange 2013, but [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[358,125,381,382],"class_list":["post-1098","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-ems","tag-exchange","tag-message","tag-tracking"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1098"}],"version-history":[{"count":7,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1098\/revisions"}],"predecessor-version":[{"id":1693,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1098\/revisions\/1693"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}