Exchange 2013 - Moving message tracking logs to new server when deleting old one

Decommisioning one of our old mailbox/CAs servers. What we don't want to do is lose any of the message tracking logs off this old server. Obviously, if we power off/uninstall we're going to lose a portion of message tracking.

Is there any way to preserve these logs? Copy to a server thats staying etc? (I guess not considering there would be duplicate file names then).
LVL 1
paulfoelAsked:
Who is Participating?
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
I suppose then replacing or removing the Exchange server in question should be delayed based on your SLA to your customer(s).  Is that 30 days in your written agreement with them?  If so, hold on to that server for your required length of time and then remove it after the timeframe expires.  Obviously, you would not want mail flowing in or out of that server during that timeframe until you decide to fully decommission it.

Otherwise, if you move the logs to a repository, I imagine you will have to manually scour them to collect whatever info your customer(s) request.  Not a very desirable situation, IMO.

Is Exchange your only method to track message traffic, or are you using a spam filter (appliance or hosted) that you might be able to utilize their reporting options?
0
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
What we don't want to do is lose any of the message tracking logs off this old server.

Why?


Is there any way to preserve these logs?

Here is a method to move the logs to a different location ... http://social.technet.microsoft.com/wiki/contents/articles/22479.move-logging-in-exchange-2013-via-powershell.aspx

I wonder if you could make a note of all the locations and copy them to a repository of your choosing.  However, I don't believe they could be used with another Exchange server.
0
 
paulfoelAuthor Commented:
Because, and correct me if Im wrong, if my customer comes to me and says get me a list of all emails recieved from this domain in the last 30 days? Which they did recently.

I understand you have to run a powershell command to check the logs on all servers. If we lose one then surely you've lost the logs that might be on that server for the last 30 days?
0
 
paulfoelAuthor Commented:
Todd - thanks.

Best way to stop mail flowing through the server? Stop necessary services?

We do use an exterrnal spam filter but that would only be for external email.
0
 
paulfoelAuthor Commented:
OK. Assume you have server A and server B - you want to get rid of B.

Is there no way to copy log files from B onto A? Or will A complain that the log files are from the wrong server? Or not be possible anyway due to duplicate filenames?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.