?
Solved

Exchange2010 Message Tracking Logs

Posted on 2016-09-22
5
Medium Priority
?
181 Views
Last Modified: 2016-09-23
Hello experts,
Got an issue with Exchange 2010 SP3 RU15 Message Tracking Logs

Logging is enabled for MailboxServer and TransportServer roles:


 PS C:\> Get-MailboxServer EXCH2 | fl messagetracking*


MessageTrackingLogEnabled               : True
MessageTrackingLogMaxAge                : 30.00:00:00
MessageTrackingLogMaxDirectorySize      : 1000 MB (1,048,576,000 bytes)
MessageTrackingLogMaxFileSize           : 10 MB (10,485,760 bytes)
MessageTrackingLogPath                  : D:\Message Tracking Logs
MessageTrackingLogSubjectLoggingEnabled : True



PS C:\> Get-TransportServer EXCH2 | fl messagetracking*


MessageTrackingLogEnabled               : True
MessageTrackingLogMaxAge                : 30.00:00:00
MessageTrackingLogMaxDirectorySize      : 1000 MB (1,048,576,000 bytes)
MessageTrackingLogMaxFileSize           : 10 MB (10,485,760 bytes)
MessageTrackingLogPath                  : D:\Message Tracking Logs
MessageTrackingLogSubjectLoggingEnabled : True


The issue is that i get only MSGTRKM... logs generated but MSGTRK logs are missing. I have disabled logging for mailbox and transport servers and re enabled again - same thing.
Any ideas?

Thanks in advance.
0
Comment
Question by:Excel
  • 3
  • 2
5 Comments
 
LVL 20

Accepted Solution

by:
strivoli earned 2000 total points
ID: 41810862
So, "D:\Message Tracking Logs" is empty, correct? Which are the permissions on the mentioned folder?
0
 

Author Comment

by:Excel
ID: 41810921
Hi Strivoli,
"D:\Message Tracking Logs" - is not empty. I have MSGTRKM logs there. But MSGTRK logs stopped being created some time ago and this just been picked up now.

Permissions OK. System - full control.
0
 
LVL 20

Assisted Solution

by:strivoli
strivoli earned 2000 total points
ID: 41810995
OK. Windows Application Logs or more specific Exchange Logs don't report any issue at the time the system stopped generating the logs? Run eventvwr.
0
 

Author Comment

by:Excel
ID: 41812101
Hi Strivoli,
I have found the cause of the issue - and you were spot on the first time. It was a permission issue. I have started looking through all related event logs and that pointed towards folder permissions.

The following permissions are required on the message tracking log directory:
Administrator: Full Control
System: Full Control
Network Service: Read, Write, and Delete Subfolders and Files

By default, the Microsoft Exchange Transport service uses the security credentials of the Network Service user account to create the new message tracking log directory and apply the correct permissions on Hub Transport servers. If the Exchange server has only the Mailbox server role installed, the Microsoft Exchange Mail Submission service creates the new message tracking log directory by using the security credentials of the Network Service user account. If the new message tracking log directory does not already exist, and the Network Service account has the rights that are required to create folders and apply permissions at the new location, the new message tracking log directory is created and the correct permissions are applied to the new directory. If the new message tracking log directory already exists, the existing folder permissions are not checked.

Ref:
https://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=7016&EvtSrc=MSExchangeTransportLogSearch

The strange thing was that MSGTRKM logs where created in same folder just fine, this confused me at the beginning.

Thanks for your help.
0
 
LVL 20

Expert Comment

by:strivoli
ID: 41812391
You're welcome! I'm glad I could help. Have a nice day!
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last month Marc Laliberte, WatchGuard’s Senior Threat Analyst, contributed reviewed the three major email authentication anti-phishing technology standards: SPF, DKIM, and DMARC. Learn more in part 2 of the series originally posted in Cyber Defense …
In this post, we will learn to set up the Group Naming policy and will see how it is going to impact the Display Name and the Email addresses of the Group.
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…
Suggested Courses

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question