Solved

Exch 2013 Message Trace in the EAC?

Posted on 2014-11-20
5
214 Views
Last Modified: 2014-11-30
So I was sent an odd bounce back that seems to be generated by the sending server but I want to track communications between my new Exchange2013 server and the sender.

I have seen reference to message trace:
http://community.office365.com/cfs-file.ashx/__key/communityserver-components-userfiles/00-00-13-15-65-Attached+Files/3583.message-trace.jpg

Is this an O365 only feature?  is there no way to utilize Message Trace in the EAC for Exchange 2013?

I can use the power shell, but even those results are not as helpful and easy to administer as the old message tracking system.  

Get-MessageTrackingLog -Sender user@somedomain.com

This generates a list, but no times.  Anyway to get output with a timestamp displayed?

Thanks.
0
Comment
Question by:tw525
  • 3
  • 2
5 Comments
 
LVL 1

Author Comment

by:tw525
ID: 40456249
I found the following:

Get-MessageTrackingLog -ResultSize Unlimited -Start "11/6/2014" -End "11/8/2014" | where{$_.recipients -like "*@example.com"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients} | export-csv D:\ExchangeLogResults.txt

But it takes like 10-15mins to run.  The other command took seconds to complete.  Not sure why this command takes so much longer to complete.
0
 
LVL 37

Expert Comment

by:Jamie McKillop
ID: 40457161
Hello,

The second command is taking so much longer because you are pulling every single tracking log in a two day span then parsing them for recipients in the example.com domain. In the first command, it is only returning logs where the sender is a specific address.

If you have an NDR, I would use the -sender and -recipients: switches to narrow it down to to the specific sender and recipient addresses. This should speed things up.

-JJ
0
 
LVL 1

Author Comment

by:tw525
ID: 40467580
Jamie,

Is there anyway to utilize the "Get-MessageTrackingLog -Sender user@somedomain.com" command but get it to display with time stamps.  I'm surprised there is not more demand for this.  The current output is only marginally helpful without time stamps.

Thanks
0
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 40467617
The output should show the time stamp. Add | fl to the command and you should see all output

I built a GUI app that you might be interested in - http://jamiemckillop.wordpress.com/2012/10/18/version-2-1-of-wizbang-exchange-message-tracker/


-JJ
0
 
LVL 1

Author Closing Comment

by:tw525
ID: 40473124
While I never got a conclusive answer on my first question.  Jamie thoroughly helped me utilize shell to address my needs.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
harden EXCH2013 7 55
Exchange 2007 to 2013 Migration Error 7 46
VBA: Conversion $ vs € and vise versa 14 43
Migration from Lotus Note to Exchange 4 27
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video discusses moving either the default database or any database to a new volume.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question