• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2292
  • Last Modified:

Any way to track mails that were dropped by a transport rule

Hi,
We mistakenly added a transport rule that was set to silently drop mail. It was in operation for a few hours.
We now want to track what mails were dropped by the rule. Is there any way, using message tracking or logs?
Note that we didn't set add an action to log an event each time it was triggered.
0
Cashbuddies
Asked:
Cashbuddies
1 Solution
 
vSolutionsITCommented:
If you remember the date and time in which this transport rule was enabled you can run the get-messagetrackinglog cmdlet to find out emails transactions during that time.
You will have to go through the messages displayed in the result and what eventid it shows for the dropped emails. I am sure for the dropped emails it wont show receive it will show something else rather it may show fail but not sure about it.

Once you get the uncommon eventid through the message tracking logs then you can filter the search again using the same date/time and event id.
0
 
CashbuddiesAuthor Commented:
You're correct, they do show with eventid of FAIL, thanks for that!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now