asked on

outgoing mail logs in Exchange 2010

Hello! I would like to go into my Exchange logs and ideally check out who mail is being sent to from specific users. I am using Exchange 2010 with all the updates. Does Exchange log where mail is sent and from whom or would I have to enter the mailboxes as admin and look in sent mail folders? Thanks!

SOLUTION

Gary Dewrell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mrosier

ASKER

great thanks for the info! a couple more questions about using this command. Is there a way to see a timestamp on the results? Also, I am not sure how to use EventID and Source? I really just want to see whatever this user sent and I get the feeling that I am getting more than that. Can you recommend a good article explaining everything for this command as to syntax and what I am looking at in results?

ASKER CERTIFIED SOLUTION

Gary Dewrell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Gary Dewrell

An example might be something like:
get-messagetrackinglog -sender youremail@yourdomain.com -start "03/22/2014" | fl Sender, Recipients, timestamp

mrosier

ASKER

great thanks for the info again! I am set but I have one last question after looking through some things. I cannot seem to find a way to export this to an Excel file or CSV file. Is this possible? OR if I can just create a file out of this command?

Gary Dewrell

Yes you can.

get-messagetrackinglog -sender youremail@yourdomain.com -start "03/22/2014" | select Sender, Recipients, timestamp | export-csv -path c:\temp\mailreport.csv

SOLUTION

mrosier

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Gary Dewrell

Nope. You are correct and my apologies for not explaining better. Expanding the recipient list does take an extra step.

Have a blessed day!.

mrosier

ASKER

I got everything I need from this solution. I noted one of my messages just to be sure people see the article for a little bit more information to get a complete result that can be assumed they want.