A. The Exchange 2007 PowerShell cmdlet Get-MessageTrackingLog is a great way to search Exchange 2007's message tracking log. For example, to quickly search for any message from bruce@savilltech.net that contains the word "Batman" in the subject, use the command
Windows\System32>Get-MessageTrackingLog -server savdalex01 -messagesubject "Batman" -sender bruce@savilltech.net
The return would be:
EventId Source Sender Recipients MessageSubject
-------------------------------------------
RECEIVE STORE... bruce@savilltech.net {clark@savilltech... Batman is the best
DELIVER STORE... bruce@savilltech.net {clark@savilltech... Batman is the best
SUBMIT STORE... bruce@savilltech.net {} Batman is the best
This output shows only some detail. If you added "| fl" to the end of the command, the output would return a list with more information, similar to the following code and return:
Windows\System32>Get-MessageTrackingLog -server savdalex01 -messagesubject "batman" -sender bruce@savilltech.net | fl
The return would be:
Timestamp : 3/11/2008 11:08:07 AM
ClientIp : fe80::5de2:b09f:7c88:bb73
ClientHostname : savdalex01.savilltech.net
ServerIp : fe80::5de2:b09f:7c88:bb73%10
ServerHostname : savdalex01
SourceContext :
ConnectorId :
Source : STOREDRIVER
EventId : RECEIVE
InternalMessageId : 1
MessageId : <6A41D17A924EE74E81753F40A83AE1860D2ECB690B@savdalex0
1.savilltech.net>
Recipients : {clark@savilltech.net}
RecipientStatus : {}
TotalBytes : 3601
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : Batman is the best
Sender : bruce@savilltech.net
ReturnPath : bruce@savilltech.net
MessageInfo : 04I:
There are a number of other commands you can use, including a start and end date and time (-start and -end), the number of results to return (-resultsize), and a list of the recipients (-recipients). For a full list of options, use the command:
Get-help get-messagetrackinglog -detailed
End of Article
Register
