chuckp2010
asked on
Pulling logs message from multiple Hub Transport servers
Hi
We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.
I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.
Does anyone know
1. The command I need to run so I only get entries from 07:00 this morning
2. How I can grab logs from all Hub Transport servers without logging onto each one
We are running Exchange 2007 SP2. We have multiple AD sites and numerous Hub Transport servers in each site.
I want to get a list of everyone that sent an email to "marketing@mydomain.com" (an internal Exchange mailbox) from 07:00 this morning.
Does anyone know
1. The command I need to run so I only get entries from 07:00 this morning
2. How I can grab logs from all Hub Transport servers without logging onto each one
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
My command above should provide you that information. The various EventID values are:
BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
BadMail, Defer Deliver, DSN, Expand, Fail, PoisonMessage, Receive, Redirect, Resolve, Send, Submit, and Transfer
ASKER
Sure, but I want the output to tell me what the result is?
So am I looking at something like:
Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid
Is that correct?
So am I looking at something like:
Get-MessageTrackingLog -Start 07:00 -End 07:00 -Recipient marketing@mydomain.com -ResultSize Unlimited -Server <servername>
| fl sender, date, eventid
Is that correct?
get-exchangeserver | where {$_.ServerRole -like "*HubTransport*"} | get-messagetrackinglog -Recipients:marketing@mydo main.com -Start "2/10/2011 7:00:00 AM" -End "2/10/2011 11:59:00 PM" | ft EventID, Sender, Recipients, MessageSubject, EventID, RecipientStatus
Should give you what you need, EventID plus Response Code.
Should give you what you need, EventID plus Response Code.
Sure, either of those should be OK.
ASKER
I also want to see if the message was delivered or not, any idea on how to do that? That is, I want to see which emails were rejected by the mailbox and which were accepted?
Any idea on how to do that?