Answered by:
Exchange 2007 Message tracking query

Question
-
Hi All
In Exchange 2003, message tracking was easy enough to use, but I am having a few issues with the 2007 EMC version!
We have multiple Hub Transports and mailbox servers in our Exchange 2007 environment. Let's say User1 sends a message to User2 and I want to use Exchange message tracking to see when it was sent.
In the Exchange Management Console, there are various values I can enter under Message Tracking Parameters. I am not sure on some:
Server? : Presumably this is a Hub Transport server, but how do I know which one to enter?
EventID?: There is RECIEVE, SEND, etc...can I not just select all to see the progression of the messageIf I can't do this via the EMC, is it possible to do this via PowerShell?
Tuesday, November 17, 2009 6:36 PM
Answers
-
Hi,
Yes, we could not do it via EMC, but we could use powershell. Regarding the command, please read the following article:
How to Search Message Tracking Logs
http://technet.microsoft.com/en-us/library/bb124926.aspx
Please navigate to chapter:
Searching the Message Tracking Logs for a Message on Multiple Servers by Using the Exchange Management Shell
Thanks,
Elvis
- Marked as answer by Sheen1990 Sunday, November 22, 2009 2:49 PM
Thursday, November 19, 2009 6:59 AM
All replies
-
Yes you can do this through Shell. For example Get-MessageTrackingLog –EventID “RECEIVE” –MessageSubject “hello” –Start “01/12/2006 00:00:00” –End “28/12/2006 18:50:00”
Also for more info on this
http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part1.html
http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part2.html
http://technet.microsoft.com/en-us/library/aa997984.aspx
RajTuesday, November 17, 2009 6:45 PM -
Hi,
Yes, we could not do it via EMC, but we could use powershell. Regarding the command, please read the following article:
How to Search Message Tracking Logs
http://technet.microsoft.com/en-us/library/bb124926.aspx
Please navigate to chapter:
Searching the Message Tracking Logs for a Message on Multiple Servers by Using the Exchange Management Shell
Thanks,
Elvis
- Marked as answer by Sheen1990 Sunday, November 22, 2009 2:49 PM
Thursday, November 19, 2009 6:59 AM -
why it can't be done via message tracking tool that is avilable in EMC 2007.because i am facing same problem
Regards
Abubakar MIrasa
Abubakar Mirasa Dubai,UAE Microsoft SpecalistSunday, May 8, 2011 1:55 PM -
It can be done using EMC, the problem is that if the company has multiple HT servers, then we will have to search through each of every server as we wouldn't know which HT server the message has passed through. I believe using powershell gives us the advantage that we don't have to logon to every HT server to track the message. Please correct me if I am wrong. Thanks a lot.
Thank you, msdn =) 99.9% of my questions have been answered :D- Proposed as answer by ITSysGuy Monday, May 9, 2011 4:45 AM
Monday, May 9, 2011 3:01 AM -
On Mon, 9 May 2011 03:01:52 +0000, wnd4459 wrote:>It can be done using EMC, the problem is that if the company has multiple HT servers, then we will have to search through each of every server as we wouldn't know which HT server the message has passed through. I believe using powershell gives us the advantage that we don't have to logon to every H? server to track the message. Please correct me if I am wrong. Thanks a lot.If you're tracking a message send from within the organization, startwith the mailbox server and find the SUBMIT event. Select that eventand click "Next", then click "Next" again. Repeat as needed. You canfollow a message through as many NT servers as it passes throughwithout moving from server to server yourself.---Rich MatheisenMCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP- Proposed as answer by ITSysGuy Monday, May 9, 2011 4:45 AM
Monday, May 9, 2011 3:12 AM