Link to home
Start Free TrialLog in
Avatar of CNITNetOps
CNITNetOpsFlag for United States of America

asked on

Exchange 2007 Message Tracking Problem

I am running Exchange 2007 SP1 on Window Server 2008.

I am trying to track messages that were received by a particular user and am unable to get any results.  I am able to see items sent by that user through message tracking but when I change the Event ID to RECEIVE no results are displayed.  Am I missing something?
Avatar of Nitin Gupta
Nitin Gupta
Flag of United Kingdom of Great Britain and Northern Ireland image

Hi,
Though enabled by default, please make sure that MT is enabled, use Set-TransportServer <Identity> -MessageTrackingLogEnabled $true
Also, pleasse refer http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part2.html
Let me know
Thanks
Nitin
Oh Sorry, since you are able to see logs, obviously it is enabled. Also you know how to check logs, so ignore my prvious comment.
Kindly share the Screenshot of your query, so that I can confirm, if there is anytihng missing there. Let meknow
Thanks
Nitin
Avatar of CNITNetOps

ASKER

Here is the screen shot.  I have also tried different combination to get it to work to no avail.


TrackingScreenShot.doc
SOLUTION
Avatar of Nitin Gupta
Nitin Gupta
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I just went back a week on my own account and still didn't get any results.  I used my account so I could be sure to use an account I knew had received mail recently.
I just noticed I am also getting an error saying "An internal processing error caused the search to fail".  
Also looking in my event tracking logs, it looks like its only logging messages with event id "SUBMIT" and nothing else.  
Here is the error I am getting when I use the command shell:

[PS] C:\Windows\System32>get-messagetrackinglog -Recipients:user@mydomain.com -EventID "RECEIVE" -Start "4/1/2009 11:15:00 AM" -End "4/2/2009 11:25:00
AM"
Get-MessageTrackingLog : An internal processing error caused the search to fail
.
At line:1 char:23
+ get-messagetrackinglog  <<<< -Recipients:user@mydomain.com -EventID
"RECEIVE" -Start "4/1/2009 11:15:00 AM" -End "4/2/2009 11:25:00 AM"
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
That worked!  I am now able to track email properly.
thanks so much!
Glad to help :-) !
Thsnks
Nitin Gupta (gupnit)