Solved

Pulling logs message from multiple Hub Transport servers

Posted on 2011-02-10
7
1,157 Views
Last Modified: 2012-05-11
Hi

We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.

I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.

Does anyone know

1. The command I need to run so I only get entries from 07:00 this morning

2. How I can grab logs from all Hub Transport servers without logging onto each one
0
Comment
Question by:chuckp2010
  • 3
  • 2
  • 2
7 Comments
 
LVL 5

Accepted Solution

by:
michael_b_smith earned 250 total points
ID: 34866021
This should do it. Run once per HT:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>

Here is the syntax for the command:

    Get-MessageTrackingLog [-DomainController <Fqdn>] [-End <DateTime>] [-EventId <String>] [InternalMessage Id <String>] [-MessageId <String>] [-MessageSubject <String>] [-Recipients <String[]>] [-Reference <String>] [-ResultSize <Unlimited>] [-Sender <String>] [-Server <ServerIdParameter>] [-Start <DateTime>] [<CommonParameters>]
0
 
LVL 5

Assisted Solution

by:LLMorrisson
LLMorrisson earned 250 total points
ID: 34866090
Or you could do something like this to get it from all Hub transports;


get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com  -EventID "RECEIVE" -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM"

0
 

Author Comment

by:chuckp2010
ID: 34867104
Thanks...

I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?

Any idea on how to do that?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867142
My command above should provide you that information. The various EventID values are:

BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
0
 

Author Comment

by:chuckp2010
ID: 34867154
Sure, but I want the output to tell me what the result is?

So am I looking at something like:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid

Is that correct?
0
 
LVL 5

Expert Comment

by:LLMorrisson
ID: 34867158
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus

Should give you what you need, EventID plus Response Code.
0
 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867315
Sure, either of those should be OK.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question