Solved

Pulling logs message from multiple Hub Transport servers

Posted on 2011-02-10
7
1,129 Views
Last Modified: 2012-05-11
Hi

We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.

I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.

Does anyone know

1. The command I need to run so I only get entries from 07:00 this morning

2. How I can grab logs from all Hub Transport servers without logging onto each one
0
Comment
Question by:chuckp2010
  • 3
  • 2
  • 2
7 Comments
 
LVL 5

Accepted Solution

by:
michael_b_smith earned 250 total points
ID: 34866021
This should do it. Run once per HT:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>

Here is the syntax for the command:

    Get-MessageTrackingLog [-DomainController <Fqdn>] [-End <DateTime>] [-EventId <String>] [InternalMessage Id <String>] [-MessageId <String>] [-MessageSubject <String>] [-Recipients <String[]>] [-Reference <String>] [-ResultSize <Unlimited>] [-Sender <String>] [-Server <ServerIdParameter>] [-Start <DateTime>] [<CommonParameters>]
0
 
LVL 5

Assisted Solution

by:LLMorrisson
LLMorrisson earned 250 total points
ID: 34866090
Or you could do something like this to get it from all Hub transports;


get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com  -EventID "RECEIVE" -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM"

0
 

Author Comment

by:chuckp2010
ID: 34867104
Thanks...

I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?

Any idea on how to do that?
0
The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867142
My command above should provide you that information. The various EventID values are:

BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
0
 

Author Comment

by:chuckp2010
ID: 34867154
Sure, but I want the output to tell me what the result is?

So am I looking at something like:

Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid

Is that correct?
0
 
LVL 5

Expert Comment

by:LLMorrisson
ID: 34867158
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydomain.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus

Should give you what you need, EventID plus Response Code.
0
 
LVL 5

Expert Comment

by:michael_b_smith
ID: 34867315
Sure, either of those should be OK.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now