Comments on: Searching Exchange Server Message Tracking Logs with PowerShell

By: Searching Message Tracking Logs by Sender or Recipient Email Address

Searching Message Tracking Logs by Sender or Recipient Email Address — Sat, 11 Jun 2022 10:08:19 +0000

[…] my series of tips on searching message tracking logs using PowerShell, in this article I will demonstrate a few techniques for searching logs based on sender or […]

By: Lisa R.

Lisa R. — Thu, 08 Oct 2020 18:28:50 +0000

In reply to Lisa R.. Sorry.....typo. Can't figure out which rule was applied.

By: Lisa R.

Lisa R. — Thu, 08 Oct 2020 18:23:29 +0000

I’m trying to get a report of which transport rule was applied to an email. Can you provide a powershell command to extract this information? I have over 20 transport rules but can figure out which rule was applied.

By: Gary

Gary — Wed, 17 Jun 2020 03:06:11 +0000

Hi Paul,

It might be dumb to ask, is there anyway to check which Inbox rule had been processed on a particular mail with its message ID? Since a mail was moved to a subfolder but no rule was created for that.

By: GREG MUND

GREG MUND — Tue, 20 Aug 2019 16:12:15 +0000

Paul,

Is there a way to search the Exchange Logs for messages with multiple recipients and get a count of how many recipients are included per email? We are most interested in messages Sent from Exchange, but would also like to see inbound email as well. Inbound is not as important, I think we can use our SPAM filter for those…

Thanks,

Greg

By: Rani

Rani — Tue, 06 Aug 2019 03:13:53 +0000

Hi Paul

i ran the logparsar command against smtp relay logs and i found the result like
sender 2500 and recipient 4100. why both result showing different. is this correct and i did something wrong here.

Thanks
Rani

By: Balal

Balal — Thu, 11 Jul 2019 05:43:01 +0000

Get-transportserver | Get-MessageTrackingLog -ResultSize Unlimited -Start “7/10/2019 07:00AM” -End “7/10/2019 09:55AM” -Sender “sender@hotmail.com” -Recipient “Recipient@domain.com” | Select-Object eventid,sender,timestamp,@{Name=”Recipients”;Expression={$_.recipients}},@{Name=”RecipientStatus”;Expression={$_.recipientstatus}},messagesubject,Source, EventData | Export-CSV c:\temp\filename.csv

exchange 2013, i run this but eventdata is showing “System.Collections.Generic.KeyValuePair`2[System.String,System.Object][]” any hint , rest is fine but i want to get event data as well to be export

By: Alexandre

Alexandre — Wed, 17 Oct 2018 13:44:23 +0000

Hi can you help me with an exchange script for 2010 version to export tracking results to csv like delievery receipts?The typical 2.5.1. OK in exchange, to know if the outside users of the organization are all receiving the emails?
Best regards!

By: stefano

stefano — Fri, 28 Sep 2018 13:16:13 +0000

In reply to stefano.

Resolved just enter this parameter RecipientStatus
following is the command used

Get-MailboxServer srv* | Get-MessageTrackingLog -Recipients mailbox@domain.local -EventId “DELIVER” | ft -AutoSize -Wrap Sender,timestamp,RecipientStatus

for the exchange 2013
🙂

regards

By: stefano

stefano — Fri, 28 Sep 2018 13:08:30 +0000

Resolved
just enter this parameter RecipientStatus
following is the command used

Get-MailboxServer SRV* | Get-MessageTrackingLog -Recipients mailbox@local.domain -EventId “DELIVER” | ft -AutoSize -Wrap Sender,timestamp,RecipientStatus

regards