How would you search Exchange 2007 log files for bounced(rejected) messages
Posted on 2009-05-06
I am trying to figure out how to search the Exchange Server log files using the Get_MessageTrackingLog function through the Exchange Management Shell. What I'm actually attempting to find out currently is if our Exchange Server rejected a message due to size limits that we have defined in Exchange. About a month ago I had a user to advise they never received an email from an outside party(Outside party didn't advise they received a Delivery Failed message either). They advised that it did have a large attachment. I did some searching for that email and could never find where it hit our Exchange server. Today the same user advised they were missing another email with several attachments from a different outside party. I did somemore searching today on both the Exchange and Edge servers log files and could not find that email either. I then proceeded to send myself an email with a large attachment from my personnal account to see what happens. I did receive a Delivery Failed message back from our Exchange or Edge server(or it appears to be our Exchange or Edge server anyway, the from address of the Delivery Failure message is from "Mailer-Daemon@mydomain.com", however I've still have not been able to find where this message actually hit either our Edge or Exchange servers in the log files.
Any thoughts on how to search the log files for the messages would be great.