Link to home
Start Free TrialLog in
Avatar of Antzs
AntzsFlag for Malaysia

asked on

Exchange 2013 Message Tracking

$recipients = Read-Host "Enter Recipients"
$Start = Read-Host "Enter Start Date"
$End = Read-Host "Enter End Date"
Get-ExchangeServer | ? {$_.isHubTransportServer -eq $true -or $_.isMailboxServer -eq $true} | %{Get-MessageTrackingLog -ResultSize Unlimited -server $_.Name -recipients $recipients  -Start $Start -End $End | select {$_.Recipients},Sender,client-ip,client-hostname,messagesubject,timestamp,source,eventid} | Export-csv c:\Output\msgtrck1.csv -nti

Open in new window


I am using the current code for message tracking in Exchange 2013.  But the output for client-ip and client-hostname is always blank.  Is my syntax wrong?

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Joe Klimis
Joe Klimis
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Antzs

ASKER

ok it works.  It seems like it is showing the clientip as my Exchange transport server.  Is there any why I can extract the actual client/server which is sending the email?
have a look at https://technet.microsoft.com/en-us/library/cc539064.aspx this describes the fields . This is for 2007 but i believe they are the same.

I hope this helps
Joe