Link to home
Start Free TrialLog in
Avatar of Member_2_6492660_1
Member_2_6492660_1Flag for United States of America

asked on

Logparser "Prompts Press A Key" Exchange 2010 SMTP Send Log

Exchange Server 2010 Enterprise SP3 RU 8 64 bit
Windows 2008 R2 64 bit
Log Parser 2.2

create this logparser script

@echo off

del smtp2.txt

"C:\Program Files (x86)\Log Parser 2.2\logparser.exe" "SELECT CASE TO_INT( SUBSTR(DATA,0,3)) when NULL then 0 else TO_INT( SUBSTR(DATA,0,3)) END AS RemoteHostReturnCode, data, count (*) AS hits FROM D:\Progra~1\Microsoft\Exchan~1\V14\TransportRoles\Logs\ProtocolLog\SmtpSend\SEND*.log WHERE RemoteHostReturnCode > 400 AND context <> 'Certificate thumbprint' AND context <> 'sending message' GROUP BY RemoteHostReturnCode, data ORDER BY hits DESC" -i:CSV -nSkipLines:4 -o:w3c >c:\util\smtp2.txt

Exit

Open in new window



This was running on my exchange 2007 enterprise server and once in awhile I had this same issue.

The output show this

#Software: Microsoft Log Parser
#Version: 1.0
#Date: 2015-02-04 20:05:05
#Fields: RemoteHostReturnCode data hits
421 421 4.7.0 [TS01] Messages from zz.zz.zzz.z temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html 29460
550 550 Requested action not taken: mailbox unavailable 2734
451 451 Temporary local problem - please try later 1970
452 452-4.2.2 The email account that you tried to reach is over quota. Please direct 1655
452 452-4.2.2 the recipient to 1655
421 421-4.7.0 unsolicited mail originating from your IP address. To protect our 1103
421 421-4.7.0 rate limited. Please visit 1103
421 421-4.7.0 http://www.google.com/mail/help/bulk_mail.html to review our Bulk 1103
421 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 1103
450 450 4.7.1 <SERV025.our.network.mydomain.com>: Helo command rejected: Host not found 921
Press a key...


This script is run automatically once a week vi task manager.

But it stops on "Press a key"   I have to Kill the Process in order for it to end.

It ran ok for about two weeks now it has not

It reads the SMTP SEND log file  

A bad record?

Anyway in logparser to bypass this?
ASKER CERTIFIED SOLUTION
Avatar of NVIT
NVIT
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Member_2_6492660_1

ASKER

Added both

Ran successfully

Thanks for the help.