Message tracking

current scenario exchange 2013 on premise.
our requirement is track the messages send from external domains (from internet)
We are using get-messagetrackinglog command and pipe it to test file.
below is command i am using
get-messagetrackinglog -sender "[email protected]" | fl > d:\user.txt
we not getting any output in the file.
please suggest

Hi,
From your description, I recommend you follow the steps below for troubleshooting:
1. Please check if you can see the message tracking log on the following folder:
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking
2. If no, please restart the Microsoft Exchange Transport Log Search service and check the result.
What's more, here is a thread for your reference:
No Results for message tracking (Note: Though it is Exchange 2010, it is also useful in this issue)
http://social.technet.microsoft.com/Forums/exchange/en-US/8a9906e8-4d6a-4db6-b58e-1fee43dec4ce/no-results-for-message-tracking?forum=exchangesvradminlegacy
Hope it helps.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Similar Messages

Problem receiving from sender, showing in SmtpReceive log but not Message Tracking

Our Exchange 2007 server (SBS2k8 really) has had problems receiving mail from a certain sender the last few weeks. With the SMTPReceive set to verbose, I can see the mail coming in but it never shows up in the message tracking logs.
Looking at similar issues, I thought maybe the content filtering agent might have been grabbing it, so I set up a transport rule to take any mail from this particular domain and set the SCL to 0 as well as bcc a copy of it to myself. But I just noticed
another entry in yesterday's smtpreceive log and that didn't do the trick (or forward a copy to me for that matter).
I'm including some samples from our SMTP log. I can see that when it works, after the 354 Start mail input line, our server sends a 250 2.6.0 code confirming the message has been queued for delivery, at which point the remote server sends a QUIT and
we close it. But when it fails, there's nothing after the 354 line.
Example of good transmission:
2014-04-23T15:00:49.636Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,0,10.0.100.3:25,50.xxx.xxx.xxx:9100,+,,
2014-04-23T15:00:49.636Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,1,10.0.100.3:25,50.xxx.xxx.xxx:9100,*,SMTPSubmit SMTPAcceptAnySender AcceptRoutingHeaders,Set Session Permissions
2014-04-23T15:00:49.636Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,2,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,"220 xxx.xxx.com Microsoft ESMTP MAIL Service ready at Wed, 23 Apr 2014 11:00:49 -0400",
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,3,10.0.100.3:25,50.xxx.xxx.xxx:9100,<,EHLO other.domain.com,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,4,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-xxx.xxx.com Hello [50.xxx.xxx.xxx],
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,5,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-SIZE 26091520,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,6,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-PIPELINING,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,7,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-DSN,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,8,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-ENHANCEDSTATUSCODES,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,9,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-STARTTLS,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,10,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-AUTH,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,11,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-8BITMIME,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,12,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250-BINARYMIME,
2014-04-23T15:00:49.948Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,13,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250 CHUNKING,
2014-04-23T15:00:50.026Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,14,10.0.100.3:25,50.xxx.xxx.xxx:9100,<,MAIL FROM:<[email protected]> SIZE=3497,
2014-04-23T15:00:50.026Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,15,10.0.100.3:25,50.xxx.xxx.xxx:9100,*,08D11000FE2BD02F;2014-04-23T15:00:49.620Z;1,receiving message
2014-04-23T15:00:50.026Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,16,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250 2.1.0 Sender OK,
2014-04-23T15:00:50.073Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,17,10.0.100.3:25,50.xxx.xxx.xxx:9100,<,RCPT TO:<[email protected]>,
2014-04-23T15:00:50.291Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,18,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250 2.1.5 Recipient OK,
2014-04-23T15:00:50.338Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,19,10.0.100.3:25,50.xxx.xxx.xxx:9100,<,DATA,
2014-04-23T15:00:50.338Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,20,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,354 Start mail input; end with <CRLF>.<CRLF>,
2014-04-23T15:00:50.525Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,21,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,250 2.6.0 <[email protected]> Queued mail for delivery,
2014-04-23T15:00:50.556Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,22,10.0.100.3:25,50.xxx.xxx.xxx:9100,<,QUIT,
2014-04-23T15:00:50.556Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,23,10.0.100.3:25,50.xxx.xxx.xxx:9100,>,221 2.0.0 Service closing transmission channel,
2014-04-23T15:00:50.556Z,SBS2k8srv\SBS Receive,08D11000FE2BD02F,24,10.0.100.3:25,50.xxx.xxx.xxx:9100,-,,Local
and an example of the message not being successfully received:
2014-04-24T11:57:37.236Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,0,10.0.100.3:25,50.xxx.xxx.xxx:10131,+,,
2014-04-24T11:57:37.236Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,1,10.0.100.3:25,50.xxx.xxx.xxx:10131,*,SMTPSubmit SMTPAcceptAnySender AcceptRoutingHeaders,Set Session Permissions
2014-04-24T11:57:37.236Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,2,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,"220 xxx.xxx.com Microsoft ESMTP MAIL Service ready at Thu, 24 Apr 2014 07:57:36 -0400",
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,3,10.0.100.3:25,50.xxx.xxx.xxx:10131,<,EHLO other.domain.com,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,4,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-xxx.xxx.com Hello [50.xxx.xxx.xxx],
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,5,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-SIZE 26091520,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,6,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-PIPELINING,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,7,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-DSN,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,8,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-ENHANCEDSTATUSCODES,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,9,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-STARTTLS,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,10,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-AUTH,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,11,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-8BITMIME,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,12,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250-BINARYMIME,
2014-04-24T11:57:37.532Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,13,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250 CHUNKING,
2014-04-24T11:57:37.579Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,14,10.0.100.3:25,50.xxx.xxx.xxx:10131,<,MAIL FROM:<[email protected]> SIZE=3481,
2014-04-24T11:57:37.579Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,15,10.0.100.3:25,50.xxx.xxx.xxx:10131,*,08D11000FE2BD40D;2014-04-24T11:57:37.220Z;1,receiving message
2014-04-24T11:57:37.579Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,16,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250 2.1.0 Sender OK,
2014-04-24T11:57:37.610Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,17,10.0.100.3:25,50.xxx.xxx.xxx:10131,<,RCPT TO:<[email protected]>,
2014-04-24T11:57:37.719Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,18,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,250 2.1.5 Recipient OK,
2014-04-24T11:57:37.750Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,19,10.0.100.3:25,50.xxx.xxx.xxx:10131,<,DATA,
2014-04-24T11:57:37.750Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,20,10.0.100.3:25,50.xxx.xxx.xxx:10131,>,354 Start mail input; end with <CRLF>.<CRLF>,
2014-04-24T11:57:37.875Z,SBS2k8srv\SBS Receive,08D11000FE2BD40D,21,10.0.100.3:25,50.xxx.xxx.xxx:10131,-,,Remote
Interestingly, we used to receive email from this sender in the past. When it stopped working, it didn't quite stop working outright - at some point after the deliveries stopped, 2 made it in, but nothing again since then.

Check the agent logs on the machine. The Exchange anti-spam agents log files are found here:
C:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\AgentLog
If you use Forefront, its agent log files are usually here:
C:\Program Files (x86)\Microsoft Forefront Protection for Exchange Server\Data\FSEAgentLog
Other software may have its log files elsewhere.
--- Rich Matheisen MCSE&I, Exchange MVP

Error when trying to access the RBAC User editor and Message tracking

Hi,
I am getting an error when trying to access the RBAC User editor and Message tracking on the Web Mgmt interface. I verified that the admin account trying to access is in the Organization Management group and has the correct Role Assignment Policy applied.
I searched through this thread below and saw that matching the msExchRoleLink and msExchUserLink attributes fixed the issue.
https://social.technet.microsoft.com/Forums/exchange/en-US/fc568cc6-8691-4127-b70b-bcc82f9b1f7f/first-2010-cas-server-no-administrator-rights-emc-permissions-gone?forum=exchange2010
However I have another environment where this is not the case and works just fine; the msExchUserLink attribute has a value of CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=Domain,DC=Local which is different as per the issue outlined in
the above thread so I am not convinced that this will work and also don’t want to blindly edit something in adsiedit without being sure.
I then checked the event logs on the server and saw the below error logged;
Current user: 'Domain/Server Services Accounts/administrator'
Request for URL 'https://server.domain.com/ecp/default.aspx?p=AdminDeliveryReports&exsvurl=1' failed with the following error:
System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Exchange.Management.ControlPanel.UrlNotFoundOrNoAccessException: The page may not be available or you might not have permission to open the
page. Please contact your administrator for the required credentials. For new credentials to take effect, you have to close this window and log on again.
at Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
at Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
--- End of inner exception stack trace ---
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.default_aspx.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Microsoft.Exchange.Management.ControlPanel.UrlNotFoundOrNoAccessException: The page may not be available or you might not have permission to open the page. Please contact your administrator for the required credentials. For new credentials to take effect, you
have to close this window and log on again.
at Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
at Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
I then had a look at the IIS permissions for ecp and owa. The account did not have permissions so I added them there but still got the same error. I’ve also tried all of the above with a newly-created account but still got the same issue.
Any ideas as to what the above event log is specifically referring to?

Hi,
From your description, I would like to clarify the following thing:
If you want to search message tracking logs, the account you use should be a member of the role groups below:
Organization Management role group, Records Management role group, Recipient Management role group.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Multiple Partners for the same customer in Message tracking of SEEBURGER

Hi,
This is for third party customers which use EDI messages. We have for one customer multiple partner numbers configured in Partner profile. I would like to know while configuring the trading partners in SEEBURGER Message Tracking, can we have multiple keys for the same customer for multiple partners for an INVOIC02. Like the following keys:
12345_INVOIC02
34567_INVOIC02
45678_INVOIC02

Hi Satya,
you can define for a vendor/customer several partner functions with different
adresses. You can create certain partner roles several times.
If you create a purchase order, than you can choose the wanted
address and partnerrole on the header level. In the standard system you
can use the patner role 'OA' ordering address and for the finance
the 'IP' Invoice presented by.
I hope I was able to help you.
Kind regards,
Zsuzsanna

How to populate the Sender and Receiver GLN/ID in the Seeburger Message Tracking

HI Team,
Scenario :
ECC--> PI--> Party
Sending GS1 XML Message to party (Not EDI). Sender Party and Receiver Party appearing as expected.
BUT User expecting to see the Sender GLN and Receiver GLN in Seeburger Message Tracking.
It should be dynamically picked form GS1 Message. Should Appear in RED BOXES Shown below.What Module Parameters Should be used for this.
I have Tried destTargetMsg and destSourceMsg. But did'nt work.
can anyone please Help

Hi Veman
You are correct. For XML to XML, you do not need BIC module.
However, since you are not using BIC module, you will not be able to enrich the metadata using the archiveXI parameter during processing at the adapter framework.
Another place to enrich the metadata would be during message mapping. You can call a custom UDF to populate the metadata and create an entry in Seeburger Message Tracking.
Please refer to the Seeburger manual for Message Tracking Function for more details on how to create the UDF.
Rgds
Eng Swee

Seeburger Message Tracking

Hi,
Can anyone please tell us how to use seeburger message tracking.
I understand that there are 3 steps to be done.
1. Mapping in IR should have a UDF which referrers to the standard Seeburger function jar files.
2. Module configuration in the channel with FileStore module.
3. Configuration in Message Tracking.
But need some details about each step.
Could anyone please provide a document which explains this configuration.
Thanks in advance
Jagruthi

Hi,
before these steps you need to have MT installer file based on your database and some settings needs to be done at database level.
if you have seeburger manuals there is one pdf 'SAPXI_Archiving_en.pdf' which talks about MT.
Suresh

Multi mapping & seeburger Message Tracking (Filestore module)

Hello,
For the people who knows seeburger archiving...
Anybody make the scenario using multi mapping (split in the receiver) with message Tracking seeburger (File Store module in the Receiver Channel)?

Hi,
before these steps you need to have MT installer file based on your database and some settings needs to be done at database level.
if you have seeburger manuals there is one pdf 'SAPXI_Archiving_en.pdf' which talks about MT.
Suresh

Exchange Server 2010 - Message Tracking Logs - Log file creation

Hi,
I would like to find out on the behavior of the exchange server in the way that it logs the message tracking.
Currently the parameter used is
MessageTrackingLogMaxDirectorySize - 10GBMessageTrackingLogMaxAge - 30daysI would like to check when the Max Directory Size has exceeded the value indicated, does Exchange server immediately deletes the oldest log file to make space for the new logs?And in the event that the oldest file is being open or locked, will exchange server delete the next oldest file? or it will reattempt to delete the "locked" file for a period of time?Lastly, when these "oldest" files is not able to be deleted, will exchange server stops logging new tracking events?Thanks!

Hi Zack,
Thank you for your question.
If you have configured the parameter of “MessageTrackingLogMaxDirectorySize” and “MessageTrackingLogMaxAge”, we think you have enable circular logging, it will delete the oldest message tracking log files for new log file when the either of the following
conditions is true:
The message tracking log directory reaches its specified maximum size.
A message tracking log file reaches its specified maximum age.
In addition, it didn’t exceeded the value indicated.
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

Too many failed message tracking resquests via task in Exchange 2010 SP3

Hi,
We are getting this alert every day and I don't find anything to solve it...
Some days it's Yellow (3%) and the others it's Red (5%)... But we don't have 5% of the messages failed.
Do there is a solution to this problem or even somewhere to look ?

To Fix your issue, try to override monitor rule of KHI: Too many failed message tracking requests via task – Red (>5%) and also rule of KHI: Too many failed message tracking requests via task – Yellow (>3%)
Also you can refer below link
http://social.technet.microsoft.com/Forums/en-US/089b0c7c-77c5-47ef-9e48-7e44a8f1d2a1/khi-too-many-failed-message-tracking-requests-via-task-in-exchange-2010-sp1-management-pack?forum=operationsmanagermgmtpacks
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Message Tracking in edge server 2010

Dear All,
any power shell command for tracking message send report and generate delivery status?
pls help
Sunil
SUNIL PATEL SYSTEM ADMINISTRATOR

Hi,
Also, we can run message tracking log to monitor the delivery report, please pay attention to the value of “EventID”. For example:
Get-MessageTrackingLog –Sender “[email protected]” –Recipients
“[email protected]” –MessageSubect “Test mail” -EventId "Delivery" | FL
More details about Track messages with delivery reports, please refer to:
https://technet.microsoft.com/en-us/library/jj150554%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
Thanks
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Allen Wang
TechNet Community Support

Message Tracking - Determing what happens to specific email

Good afternoon all! I have a situation with a client Exchange 2010 server. They have a front end/back end exchange setup. They are running this on Server 2008 R2. Mail is setup and working great. They have ONE specific email
they receive on a nightly basis. This email makes it through the front end spam solution, then passes the receive connector. In the message tracking logs I see the message is received. It is sent to a distribution group. Other email
that is sent to the distribution group will have a corresponding expand and deliver logs. This particular email does not have anything further than receive. No other logs to identify why it is not being delivered or dropped or anything. I
have run the following command to ensure I have the full information:
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>get-exchangeserver | where {$_.isHubTransportServer -eq $tru
e -or $_.isMailboxServer -eq $true} | Get-MessageTrackinglog -MessageId "[email protected]" | fl
RunspaceId              : e5feafd8-bb88-414d-ad8f-7841df4ad30d
Timestamp               : 10/24/2014 12:20:44 AM
ClientIp                : *.*.*.* (Front End IP)
ClientHostname          : frontend.spam.solution
ServerIp                : 192.168.10.240
ServerHostname          : Exch2010.domain.local
SourceContext           : 08D1BC5A8D9DC4B6;2014-10-24T05:20:43.396Z;0
ConnectorId             : Exch2010\Default Exch2010
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 3816
MessageId               : <[email protected]>
Recipients              :
{[email protected]}
RecipientStatus         : {}
TotalBytes              : 5091
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Delivery Status Notification (Failure)
Sender                  :
[email protected]
ReturnPath              : <>
MessageInfo             : 00A: NTS:
MessageLatency          :
MessageLatencyType      : None
EventData               : {[FirstForestHop, Exch2010.domain.local]}
There are no further logs on this message. For those that will read the delivery status notification. This message is a bounce back message that they are not receiving. I did change the Default Properties on the remote domains, so that
Allow external out-of-office messages and legacy out-of-office messages is selected as well as under message format: Allow Auto replies, Allow Auto Forward, Allow Delivery Reports, Allow Non-Delivery Reports are also all selected.
I am lost on where to figure out what happens to this email after the receive connector gets it. Messages normally have other messages that show additional information; however this message just dies there.
Any ideas or help would be greatly appreciated!
Thanks
Jason

Thanks for the reply. I actually started with searches for anything going to that distribution group. I used the GUI version, then went to the shell. Neither was able to produce anything beyond receive. I thought maybe the group was
not setup properly to get emails from the outside, but after testing from my email address directly to the group, I see normal behavior it expands then delivers to the store. With these particular emails, they only ever have the event of receive nothing
further. Any ideas where to look when that happens?
Thanks
Jason

Message tracking display and reporting

Hi,
I am newish to the email appliance. We have a c370.
I am told we need reports daily detailing each email address leaving the ironport each day.
If we could also see the sending address that would be great.
message tracking seems to have this information but there are two problems:
1. it only lists 250 items.
2. i cannot schedule this report?
Any ideas as to the 2 items?

You are correct, this is not possible because:
- Tracking can show only up to 1000 items.
- It is not possible to schedule Tracking searches.
There is an Internal Users Report that tracks how many clean/threat messages for each user. However, these are just counters and will not show the details for each message. I'd still suggest looking over that page (from Monitor tab) to see if it meets your needs.
So the only other suggestion I can offer is manually parsing the mail_logs each day for all the required data. Sorry.
- Jackie

Message Tracking sees the message, but it was not delivered to the mailboxI

Hello ,
I have exchange 2010
2 HUB & CAS
2 Mailboxes
There are one mail lost , it is delivered buy it is not shown in the recipient mailbox .
I can see the mail delivered in Message Tracking sees the message, but it was not delivered to the mailbox .
I check the antispam , anti virus, transport rules and nothing
How we can investigate to check where this mail gone ?
Need help please
MCP MCSA MCSE MCT MCTS CCNA

Hi Yasser,
Does the issue only happen to one user with one specific message? Please check if the missing message is located in other mailbox folders such as Deleted Items folder, Junk E-mail folder. Also check the Inbox rules in Outlook.
If the message is still listed in the sender's send items folder, please close Outlook and only use OWA to re-send this message to the problematic recipient. Then check whether this recipient can receive this message in OWA or not.
Regards,
Winnie Liang
TechNet Community Support
Hello ,
how can i check all mails stuck in shadow redundancy or dumpster and not delivered ?
MCP MCSA MCSE MCT MCTS CCNA

Message Tracking logs for secondary smtp address

Hi,
There are many people sending mails to secondary smtp address instead of primary smtp address. How can i pull the report of message tracking logs if they sent it to secondary smtp address using get-messagetrackinglog cmdlet?
Sankar M http://messagingdevelopment.blogspot.in/

Hi Sankar,
If I don't understand your description, it seems that you want to get the message tracking log on an mailbox with primary SMTP address and secondary SMTP address.
If it is the case, please add both primary SMTP address and secondary SMTP address to the "Recipients" parameter. More details to see:
http://technet.microsoft.com/en-us/library/aa997573(v=exchg.150).aspx
Thanks
Mavis Huang
TechNet Community Support

Message tracking and disk usage

hello,
I cannot find answer in documentation...
what happens if disk quota for message tracking is full?
a) message tracking is stopped
b) oldest messages will be overwritten
which possibility is correct?
how much is slowdown performance if message tracking is enabled? is it tha same slowdown on different boxes (1xx, 3xx, 6xx)?
martin

Hello Christopher,
Last year, you said the system is configured to never become 100% full, the system delete the oldest messages first prior... but what can we do if the tracking database is absolutely full?
I have two Ironman M1060 in version 7.7.0-206.
One of them is full:
Centralized Message Tracking
Processing Queue: 101.0%
So the message tracking doesn't work anymore:
Message Tracking
Could not establish connection to Message Tracking service.
To change the size of quota doesn't change anything.
Do you know any way to drop a part of logs, the oldest ones?
Because, in accord of our law, we must save six months of logs at least.
Thanks you very much for your help.
Jennifer

Message tracking

Similar Messages

Maybe you are looking for