locked
Exchange 2007 Message tracking query RRS feed

  • Question

  • Hi All

    In Exchange 2003, message tracking was easy enough to use, but I am having a few issues with the 2007 EMC version!

    We have multiple Hub Transports and mailbox servers in our Exchange 2007 environment. Let's say User1 sends a message to User2 and I want to use Exchange message tracking to see when it was sent.

    In the Exchange Management Console, there are various values I can enter under Message Tracking Parameters. I am not sure on some:

    Server? : Presumably this is a Hub Transport server, but how do I know which one to enter?
    EventID?: There is RECIEVE, SEND, etc...can I not just select all to see the progression of the message

    If I can't do this via the EMC, is it possible to do this via PowerShell?

    Tuesday, November 17, 2009 6:36 PM

Answers

  • Hi,

     

    Yes, we could not do it via EMC, but we could use powershell. Regarding the command, please read the following article:

     

    How to Search Message Tracking Logs

    http://technet.microsoft.com/en-us/library/bb124926.aspx

     

    Please navigate to chapter:

    Searching the Message Tracking Logs for a Message on Multiple Servers by Using the Exchange Management Shell

     

    Thanks,

     

    Elvis

    • Marked as answer by Sheen1990 Sunday, November 22, 2009 2:49 PM
    Thursday, November 19, 2009 6:59 AM

All replies

  • Yes you can do this through Shell. For example  Get-MessageTrackingLog –EventID “RECEIVE” –MessageSubject “hello” –Start “01/12/2006 00:00:00” –End “28/12/2006 18:50:00”


    Also for more info on this

    http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part1.html

    http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part2.html

    http://technet.microsoft.com/en-us/library/aa997984.aspx


    Raj
    Tuesday, November 17, 2009 6:45 PM
  • Hi,

     

    Yes, we could not do it via EMC, but we could use powershell. Regarding the command, please read the following article:

     

    How to Search Message Tracking Logs

    http://technet.microsoft.com/en-us/library/bb124926.aspx

     

    Please navigate to chapter:

    Searching the Message Tracking Logs for a Message on Multiple Servers by Using the Exchange Management Shell

     

    Thanks,

     

    Elvis

    • Marked as answer by Sheen1990 Sunday, November 22, 2009 2:49 PM
    Thursday, November 19, 2009 6:59 AM
  • why it can't be done via message tracking tool that is avilable in EMC 2007.because i am facing same problem

    Regards

    Abubakar MIrasa


    Abubakar Mirasa Dubai,UAE Microsoft Specalist
    Sunday, May 8, 2011 1:55 PM
  • It can be done using EMC, the problem is that if the company has multiple HT servers, then we will have to search through each of every server as we wouldn't know which HT server the message has passed through. I believe using powershell gives us the advantage that we don't have to logon to every HT server to track the message. Please correct me if I am wrong. Thanks a lot.
    Thank you, msdn =) 99.9% of my questions have been answered :D
    • Proposed as answer by ITSysGuy Monday, May 9, 2011 4:45 AM
    Monday, May 9, 2011 3:01 AM
  • On Mon, 9 May 2011 03:01:52 +0000, wnd4459 wrote:
     
    >It can be done using EMC, the problem is that if the company has multiple HT servers, then we will have to search through each of every server as we wouldn't know which HT server the message has passed through. I believe using powershell gives us the advantage that we don't have to logon to every H? server to track the message. Please correct me if I am wrong. Thanks a lot.
     
    If you're tracking a message send from within the organization, start
    with the mailbox server and find the SUBMIT event. Select that event
    and click "Next", then click "Next" again. Repeat as needed. You can
    follow a message through as many NT servers as it passes through
    without moving from server to server yourself.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    • Proposed as answer by ITSysGuy Monday, May 9, 2011 4:45 AM
    Monday, May 9, 2011 3:12 AM