Solved

Any way to track mails that were dropped by a transport rule

Posted on 2014-03-13
2
1,650 Views
Last Modified: 2014-03-13
Hi,
We mistakenly added a transport rule that was set to silently drop mail. It was in operation for a few hours.
We now want to track what mails were dropped by the rule. Is there any way, using message tracking or logs?
Note that we didn't set add an action to log an event each time it was triggered.
0
Comment
Question by:Cashbuddies
2 Comments
 
LVL 8

Accepted Solution

by:
vSolutionsIT earned 500 total points
ID: 39926189
If you remember the date and time in which this transport rule was enabled you can run the get-messagetrackinglog cmdlet to find out emails transactions during that time.
You will have to go through the messages displayed in the result and what eventid it shows for the dropped emails. I am sure for the dropped emails it wont show receive it will show something else rather it may show fail but not sure about it.

Once you get the uncommon eventid through the message tracking logs then you can filter the search again using the same date/time and event id.
0
 

Author Closing Comment

by:Cashbuddies
ID: 39926470
You're correct, they do show with eventid of FAIL, thanks for that!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question