Message Tracking Logs Exchange 2010
Hi,
I have a customer who needs to know email sent from a specific address from January this year. Is there a way of completing this through powershell?
I have tried the following with no success. IT keeps complaining about the end time.
get-messagetrackinglog -Sender "xyx@abc.com" -Server "ABC-EXCHANGE" -End "20/08/2014 13:42:00" | Select Sender,{$_.Recipients},{$_
Returns:
Cannot process argument transformation on parameter 'End'. Cannot convert value "20/08/2014 13:42:00" to type "System.D
ateTime". Error: "String was not recognized as a valid DateTime."
+ CategoryInfo : InvalidData: (:) [Get-MessageTrackingLog], ParameterBindin...mationEx
+ FullyQualifiedErrorId : ParameterArgumentTransform
I have a customer who needs to know email sent from a specific address from January this year. Is there a way of completing this through powershell?
I have tried the following with no success. IT keeps complaining about the end time.
get-messagetrackinglog -Sender "xyx@abc.com" -Server "ABC-EXCHANGE" -End "20/08/2014 13:42:00" | Select Sender,{$_.Recipients},{$_
Returns:
Cannot process argument transformation on parameter 'End'. Cannot convert value "20/08/2014 13:42:00" to type "System.D
ateTime". Error: "String was not recognized as a valid DateTime."
+ CategoryInfo : InvalidData: (:) [Get-MessageTrackingLog], ParameterBindin...mationEx
+ FullyQualifiedErrorId : ParameterArgumentTransform
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Check the Maximum Age set for the tracking logs, by default it will be 30 days..
Ref : http://technet.microsoft.com/en-us/library/cc539071.aspx
Get-TransportServer | Select Name,MessageTrackingLogMaxAge
Get-MailboxServer | Select Name,MessageTrackingLogMaxAgeRef : http://technet.microsoft.com/en-us/library/cc539071.aspx
Hi,
Check this,
Searching Exchange Server 2010 Message Tracking Logs with PowerShell
Hope that helps :)
Check this,
Searching Exchange Server 2010 Message Tracking Logs with PowerShell
Hope that helps :)
ASKER
Thanks, 30 days default setting. Is there any other way of getting an audit of all sent items?
There is no conventional way to generate report, You can try with Search-Mailbox command to search in user mailbox and report the mails send by user...
Example.. Following code will search all emails in User1 mailbox send by user1@domain.com after specified date and dump the report to administrator mailbox SearchLog folder.
http://help.outlook.com/en-US/140/ms.exch.ecp.newmailboxsearch_searchquery.aspx
Example.. Following code will search all emails in User1 mailbox send by user1@domain.com after specified date and dump the report to administrator mailbox SearchLog folder.
Search-Mailbox -Identity "User1" -SearchQuery 'Sent:> 01/01/2014 AND from:user1@domain.com' -TargetMailbox "administrator" -TargetFolder "SearchLog" -LogOnly -LogLevel Fullhttp://help.outlook.com/en-US/140/ms.exch.ecp.newmailboxsearch_searchquery.aspx
ASKER
Subsun,
Thank you for your help. We have decided that searching through OWA is the easiest solution.
Thank you all for input.
Liam
Thank you for your help. We have decided that searching through OWA is the easiest solution.
Thank you all for input.
Liam
ASKER
Resolved.
ASKER
Thanks for your answer. I ran the report and the earliest date shows as: 28/07/2014 09:20:30. I set the result size to unlimited and that is all I got.
Liam