Link to home
Start Free TrialLog in
Avatar of tw525
tw525Flag for United States of America

asked on

Exch 2013 Message Trace in the EAC?

So I was sent an odd bounce back that seems to be generated by the sending server but I want to track communications between my new Exchange2013 server and the sender.

I have seen reference to message trace:
http://community.office365.com/cfs-file.ashx/__key/communityserver-components-userfiles/00-00-13-15-65-Attached+Files/3583.message-trace.jpg

Is this an O365 only feature?  is there no way to utilize Message Trace in the EAC for Exchange 2013?

I can use the power shell, but even those results are not as helpful and easy to administer as the old message tracking system.  

Get-MessageTrackingLog -Sender user@somedomain.com

This generates a list, but no times.  Anyway to get output with a timestamp displayed?

Thanks.
Avatar of tw525
tw525
Flag of United States of America image

ASKER

I found the following:

Get-MessageTrackingLog -ResultSize Unlimited -Start "11/6/2014" -End "11/8/2014" | where{$_.recipients -like "*@example.com"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients} | export-csv D:\ExchangeLogResults.txt

But it takes like 10-15mins to run.  The other command took seconds to complete.  Not sure why this command takes so much longer to complete.
Avatar of Jamie McKillop
Hello,

The second command is taking so much longer because you are pulling every single tracking log in a two day span then parsing them for recipients in the example.com domain. In the first command, it is only returning logs where the sender is a specific address.

If you have an NDR, I would use the -sender and -recipients: switches to narrow it down to to the specific sender and recipient addresses. This should speed things up.

-JJ
Avatar of tw525

ASKER

Jamie,

Is there anyway to utilize the "Get-MessageTrackingLog -Sender user@somedomain.com" command but get it to display with time stamps.  I'm surprised there is not more demand for this.  The current output is only marginally helpful without time stamps.

Thanks
ASKER CERTIFIED SOLUTION
Avatar of Jamie McKillop
Jamie McKillop
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tw525

ASKER

While I never got a conclusive answer on my first question.  Jamie thoroughly helped me utilize shell to address my needs.