Solved

Exchange2010 Message Tracking Logs

Posted on 2016-09-22
5
42 Views
Last Modified: 2016-09-23
Hello experts,
Got an issue with Exchange 2010 SP3 RU15 Message Tracking Logs

Logging is enabled for MailboxServer and TransportServer roles:


 PS C:\> Get-MailboxServer EXCH2 | fl messagetracking*


MessageTrackingLogEnabled               : True
MessageTrackingLogMaxAge                : 30.00:00:00
MessageTrackingLogMaxDirectorySize      : 1000 MB (1,048,576,000 bytes)
MessageTrackingLogMaxFileSize           : 10 MB (10,485,760 bytes)
MessageTrackingLogPath                  : D:\Message Tracking Logs
MessageTrackingLogSubjectLoggingEnabled : True



PS C:\> Get-TransportServer EXCH2 | fl messagetracking*


MessageTrackingLogEnabled               : True
MessageTrackingLogMaxAge                : 30.00:00:00
MessageTrackingLogMaxDirectorySize      : 1000 MB (1,048,576,000 bytes)
MessageTrackingLogMaxFileSize           : 10 MB (10,485,760 bytes)
MessageTrackingLogPath                  : D:\Message Tracking Logs
MessageTrackingLogSubjectLoggingEnabled : True


The issue is that i get only MSGTRKM... logs generated but MSGTRK logs are missing. I have disabled logging for mailbox and transport servers and re enabled again - same thing.
Any ideas?

Thanks in advance.
0
Comment
Question by:Excel
  • 3
  • 2
5 Comments
 
LVL 19

Accepted Solution

by:
strivoli earned 500 total points
ID: 41810862
So, "D:\Message Tracking Logs" is empty, correct? Which are the permissions on the mentioned folder?
0
 

Author Comment

by:Excel
ID: 41810921
Hi Strivoli,
"D:\Message Tracking Logs" - is not empty. I have MSGTRKM logs there. But MSGTRK logs stopped being created some time ago and this just been picked up now.

Permissions OK. System - full control.
0
 
LVL 19

Assisted Solution

by:strivoli
strivoli earned 500 total points
ID: 41810995
OK. Windows Application Logs or more specific Exchange Logs don't report any issue at the time the system stopped generating the logs? Run eventvwr.
0
 

Author Comment

by:Excel
ID: 41812101
Hi Strivoli,
I have found the cause of the issue - and you were spot on the first time. It was a permission issue. I have started looking through all related event logs and that pointed towards folder permissions.

The following permissions are required on the message tracking log directory:
Administrator: Full Control
System: Full Control
Network Service: Read, Write, and Delete Subfolders and Files

By default, the Microsoft Exchange Transport service uses the security credentials of the Network Service user account to create the new message tracking log directory and apply the correct permissions on Hub Transport servers. If the Exchange server has only the Mailbox server role installed, the Microsoft Exchange Mail Submission service creates the new message tracking log directory by using the security credentials of the Network Service user account. If the new message tracking log directory does not already exist, and the Network Service account has the rights that are required to create folders and apply permissions at the new location, the new message tracking log directory is created and the correct permissions are applied to the new directory. If the new message tracking log directory already exists, the existing folder permissions are not checked.

Ref:
https://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=7016&EvtSrc=MSExchangeTransportLogSearch

The strange thing was that MSGTRKM logs where created in same folder just fine, this confused me at the beginning.

Thanks for your help.
0
 
LVL 19

Expert Comment

by:strivoli
ID: 41812391
You're welcome! I'm glad I could help. Have a nice day!
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now