Log in Exchange 2013

Armitage318
Armitage318 used Ask the Experts™
on
Hi, I would like to search message log in my Exchange 2013, specifically I need to track sender smtp's ip address.
Is there a way to open a log file as in "tail -f /var/log/maillog" (Linux)?
I mean, in order to see log in real time.
Thank you very much
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
KimputerIT Manager

Commented:
First you have to make sure you have logging enabled and enough details are logged (set to higher level if not). After that's done, you can use a free program like https://www.baremetalsoft.com/baretail/ and open the current incoming smtp log file (which is a daily file).
Armitage318

Author

Commented:
Hi, I already have WinTail, I think it is almost the same.

For logs, do you refer to:

C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking
?

In such folder, most recent file is 2017, so I assume logs are in a different place.. thank you
IT Manager
Commented:
To checking incoming IP addresses, usually you read logs in this location:
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive
If nothing is there, set debug/verbose logging on the receive connector
Armitage318

Author

Commented:
thankyou!!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial