Solved

Pulling logs message from multiple Hub Transport servers

Posted on 2011-02-10
7
1,239 Views
Last Modified: 2012-05-11
Hi

We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.

I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.

Does anyone know

1. The command I need to run so I only get entries from 07:00 this morning

2. How I can grab logs from all Hub Transport servers without logging onto each one
0
Comment
Question by:chuckp2010
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 5

Accepted Solution

by:
michael_b_smith earned 250 total points
ID: 34866021
This should do it. Run once per HT:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>

Here is the syntax for the command:

    Get-MessageTrackingLog [-DomainController <Fqdn>] [-End <DateTime>] [-EventId <String>] [InternalMessage Id <String>] [-MessageId <String>] [-MessageSubject <String>] [-Recipients <String[]>] [-Reference <String>] [-ResultSize <Unlimited>] [-Sender <String>] [-Server <ServerIdParameter>] [-Start <DateTime>] [<CommonParameters>]
0
 
LVL 5

Assisted Solution

by:LLMorrisson
LLMorrisson earned 250 total points
ID: 34866090
Or you could do something like this to get it from all Hub transports;


get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com  -EventID "RECEIVE" -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM"

0
 

Author Comment

by:chuckp2010
ID: 34867104
Thanks...

I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?

Any idea on how to do that?
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867142
My command above should provide you that information. The various EventID values are:

BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
0
 

Author Comment

by:chuckp2010
ID: 34867154
Sure, but I want the output to tell me what the result is?

So am I looking at something like:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid

Is that correct?
0
 
LVL 5

Expert Comment

by:LLMorrisson
ID: 34867158
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus

Should give you what you need, EventID plus Response Code.
0
 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867315
Sure, either of those should be OK.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Outlook 2010 locking up for periods of time 5 52
Does exchange server encrypt my email? 11 107
Office 365 adding a domain 3 36
EXCH2013 Public Folder problems 5 22
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In-place Upgrading Dirsync to Azure AD Connect
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data‚Ķ
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question