Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1431
  • Last Modified:

Pulling logs message from multiple Hub Transport servers

Hi

We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.

I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.

Does anyone know

1. The command I need to run so I only get entries from 07:00 this morning

2. How I can grab logs from all Hub Transport servers without logging onto each one
0
chuckp2010
Asked:
chuckp2010
  • 3
  • 2
  • 2
2 Solutions
 
michael_b_smithCommented:
This should do it. Run once per HT:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>

Here is the syntax for the command:

    Get-MessageTrackingLog [-DomainController <Fqdn>] [-End <DateTime>] [-EventId <String>] [InternalMessage Id <String>] [-MessageId <String>] [-MessageSubject <String>] [-Recipients <String[]>] [-Reference <String>] [-ResultSize <Unlimited>] [-Sender <String>] [-Server <ServerIdParameter>] [-Start <DateTime>] [<CommonParameters>]
0
 
LLMorrissonCommented:
Or you could do something like this to get it from all Hub transports;


get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com  -EventID "RECEIVE" -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM"

0
 
chuckp2010Author Commented:
Thanks...

I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?

Any idea on how to do that?
0
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

 
michael_b_smithCommented:
My command above should provide you that information. The various EventID values are:

BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
0
 
chuckp2010Author Commented:
Sure, but I want the output to tell me what the result is?

So am I looking at something like:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid

Is that correct?
0
 
LLMorrissonCommented:
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus

Should give you what you need, EventID plus Response Code.
0
 
michael_b_smithCommented:
Sure, either of those should be OK.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now