[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 432
  • Last Modified:

Exchange 2010 Message Tracking Logs

I was running some searches agains our messsage tracking logs using the get-messagetrackinglog cmdlet.  When I was running get-messagetrackinglog -EventID "SEND" -ResultSize unlimited -Start "03/01/2014 00:00:00 AM" -END "03/27/2014 11:59:00 PM" the command returned no results.  When running get-messagetrackinglog -EventID "SUBMIT" -ResultSize unlimited -Start "03/01/2014 00:00:00 AM" -END "03/27/2014 11:59:00 PM" I get plenty of results.  Is there a reason why there would be no results for an eventid of send?

We do route all mail through a thirdparty who provides spam filtering and archiving for business continuity.
0
georgedschneider
Asked:
georgedschneider
1 Solution
 
Jian An LimCommented:
when emails are using MAPI (typically Outlook or MAPICDO) to send email, it is consider submit (to exchange server) not send

eventid Send is for someone to use the telnet protocol to telnet on port 25 and send an email.

so you route all email is to thirdparty usually trigger when a user submit an email .. so you won't see much send.


to test this,
you can telnet to <exchangeserver> 25 and try to send an email

then your messagetrackinglogs will show up a eventid send
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now