Exchange 2007 Message Tracking Logs

Exchange 2007 Message Tracking using Exchange Management Shell (Power Shell)

 [PS] C:UsersarafiqueDesktop>Get-TransportServer techies-ex01 | fl *messagetracking*

MessageTrackingLogEnabled : True

MessageTrackingLogMaxAge : 30.00:00:00

MessageTrackingLogMaxDirectorySize : 250MB

MessageTrackingLogMaxFileSize : 10MB

MessageTrackingLogPath : C:Program FilesMicrosoftExchange ServerTransportRolesLogsMessageTracking

MessageTrackingLogSubjectLoggingEnabled : True

More on this can be found here

http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part1.html

This format comprises the following information:

MSGTRK prefix for log files found on Hub Transport or Edge Transport servers.

MSGTRKM prefix for log files found on Mailbox servers.

Track particular message with a subject line

Get-MessageTrackingLog –EventID “RECEIVE” –MessageSubject “hello” –Start “10/20/2010” -End “10/21/2010”

Get-MessageTrackingLog –EventID “RECEIVE” –MessageSubject “hello” –Start “01/12/2006 00:00:00” –End “28/12/2006 18:50:00”