Solved

Logparser "Prompts Press A Key" Exchange 2010 SMTP Send Log

Posted on 2015-02-05
2
402 Views
Last Modified: 2015-02-05
Exchange Server 2010 Enterprise SP3 RU 8 64 bit
Windows 2008 R2 64 bit
Log Parser 2.2

create this logparser script

@echo off

del smtp2.txt

"C:\Program Files (x86)\Log Parser 2.2\logparser.exe" "SELECT CASE TO_INT( SUBSTR(DATA,0,3)) when NULL then 0 else TO_INT( SUBSTR(DATA,0,3)) END AS RemoteHostReturnCode, data, count (*) AS hits FROM D:\Progra~1\Microsoft\Exchan~1\V14\TransportRoles\Logs\ProtocolLog\SmtpSend\SEND*.log WHERE RemoteHostReturnCode > 400 AND context <> 'Certificate thumbprint' AND context <> 'sending message' GROUP BY RemoteHostReturnCode, data ORDER BY hits DESC" -i:CSV -nSkipLines:4 -o:w3c >c:\util\smtp2.txt

Exit

Open in new window



This was running on my exchange 2007 enterprise server and once in awhile I had this same issue.

The output show this

#Software: Microsoft Log Parser
#Version: 1.0
#Date: 2015-02-04 20:05:05
#Fields: RemoteHostReturnCode data hits
421 421 4.7.0 [TS01] Messages from zz.zz.zzz.z temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html 29460
550 550 Requested action not taken: mailbox unavailable 2734
451 451 Temporary local problem - please try later 1970
452 452-4.2.2 The email account that you tried to reach is over quota. Please direct 1655
452 452-4.2.2 the recipient to 1655
421 421-4.7.0 unsolicited mail originating from your IP address. To protect our 1103
421 421-4.7.0 rate limited. Please visit 1103
421 421-4.7.0 http://www.google.com/mail/help/bulk_mail.html to review our Bulk 1103
421 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 1103
450 450 4.7.1 <SERV025.our.network.mydomain.com>: Helo command rejected: Host not found 921
Press a key...


This script is run automatically once a week vi task manager.

But it stops on "Press a key"   I have to Kill the Process in order for it to end.

It ran ok for about two weeks now it has not

It reads the SMTP SEND log file  

A bad record?

Anyway in logparser to bypass this?
0
Comment
Question by:Thomas Grassi
2 Comments
 
LVL 23

Accepted Solution

by:
NVIT earned 500 total points
ID: 40591847
Try adding the -q:ON and / or -iw:ON switches. See the LogParser help for Global Switches:
@echo off

del smtp2.txt

"C:\Program Files (x86)\Log Parser 2.2\logparser.exe" "SELECT CASE TO_INT( SUBSTR(DATA,0,3)) when NULL then 0 else TO_INT( SUBSTR(DATA,0,3)) END AS RemoteHostReturnCode, data, count (*) AS hits FROM D:\Progra~1\Microsoft\Exchan~1\V14\TransportRoles\Logs\ProtocolLog\SmtpSend\SEND*.log WHERE RemoteHostReturnCode > 400 AND context <> 'Certificate thumbprint' AND context <> 'sending message' GROUP BY RemoteHostReturnCode, data ORDER BY hits DESC" -q:ON -iw:ON -i:CSV -nSkipLines:4 -o:w3c >c:\util\smtp2.txt

Exit

Open in new window

0
 
LVL 23

Author Closing Comment

by:Thomas Grassi
ID: 40592700
Added both

Ran successfully

Thanks for the help.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
In this fourth video of the Xpdf series, we discuss and demonstrate the PDFinfo utility, which retrieves the contents of a PDF's Info Dictionary, as well as some other information, including the page count. We show how to isolate the page count in a…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now