Pulling logs message from multiple Hub Transport servers

Hi

We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.

I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.

Does anyone know

1. The command I need to run so I only get entries from 07:00 this morning

2. How I can grab logs from all Hub Transport servers without logging onto each one
chuckp2010Asked:
Who is Participating?
 
Michael B. SmithConnect With a Mentor Exchange & Active Directory ExpertCommented:
This should do it. Run once per HT:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>

Here is the syntax for the command:

    Get-MessageTrackingLog [-DomainController <Fqdn>] [-End <DateTime>] [-EventId <String>] [InternalMessage Id <String>] [-MessageId <String>] [-MessageSubject <String>] [-Recipients <String[]>] [-Reference <String>] [-ResultSize <Unlimited>] [-Sender <String>] [-Server <ServerIdParameter>] [-Start <DateTime>] [<CommonParameters>]
0
 
LLMorrissonConnect With a Mentor Commented:
Or you could do something like this to get it from all Hub transports;


get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com  -EventID "RECEIVE" -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM"

0
 
chuckp2010Author Commented:
Thanks...

I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?

Any idea on how to do that?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Michael B. SmithExchange & Active Directory ExpertCommented:
My command above should provide you that information. The various EventID values are:

BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
0
 
chuckp2010Author Commented:
Sure, but I want the output to tell me what the result is?

So am I looking at something like:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid

Is that correct?
0
 
LLMorrissonCommented:
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus

Should give you what you need, EventID plus Response Code.
0
 
Michael B. SmithExchange & Active Directory ExpertCommented:
Sure, either of those should be OK.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.