Solved

Exchange 2010 Message Tracking Logs

Posted on 2014-03-28
1
407 Views
Last Modified: 2014-04-01
I was running some searches agains our messsage tracking logs using the get-messagetrackinglog cmdlet.  When I was running get-messagetrackinglog -EventID "SEND" -ResultSize unlimited -Start "03/01/2014 00:00:00 AM" -END "03/27/2014 11:59:00 PM" the command returned no results.  When running get-messagetrackinglog -EventID "SUBMIT" -ResultSize unlimited -Start "03/01/2014 00:00:00 AM" -END "03/27/2014 11:59:00 PM" I get plenty of results.  Is there a reason why there would be no results for an eventid of send?

We do route all mail through a thirdparty who provides spam filtering and archiving for business continuity.
0
Comment
Question by:georgedschneider
1 Comment
 
LVL 36

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 39964386
when emails are using MAPI (typically Outlook or MAPICDO) to send email, it is consider submit (to exchange server) not send

eventid Send is for someone to use the telnet protocol to telnet on port 25 and send an email.

so you route all email is to thirdparty usually trigger when a user submit an email .. so you won't see much send.


to test this,
you can telnet to <exchangeserver> 25 and try to send an email

then your messagetrackinglogs will show up a eventid send
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question