Need help regarding the location of Exchange 2013 Logs for parsing

Hi, I am trying to create reports based on the logs that are created on my exchange server. I am using
exchange 2013. My problem is that I cannot handle every log, and instead want specific types of logs.
I need help finding the specific locations of the following types of logs (If they even exist), so that I can parse them and use them effectively:
Audit Logs (Mailbox logons, Mailbox permission changes, Mailbox property changes,
Exchange store changes)
Mail Report Logs (Mailbox size and growth, Mailbox storage growth, Enabled users, Expired and Soon-to-Expire Mailboxes)
Exchange Traffic Reports (Details on size and amount of messages sent and recieved, Internet traffic [to and from], Traffic between exchange users)
I understand this might sound like a huge undertaking, but any help that can be provided would be appreciated.
Again, I need information on the locations of these types of logs on the exchange server, so that I can parse them. Collecting them all and searching through them is not practical for my available resources.
Thanks,
Matt

Audit Logs (Mailbox logons, Mailbox permission
changes, Mailbox property changes, Exchange
store changes) ---- these are two type of logs, 1. mailbox audit logs and that is stored in each mailbox under dumpster
http://technet.microsoft.com/en-us/library/ff461930(v=exchg.150).aspx however you need to
enable
it for individual mailboxes... 2. admin audit log, this is stored into a system mailbox dumpster.... http://technet.microsoft.com/en-us/library/dd335052(v=exchg.141).aspx
Mail Report Logs (Mailbox size and growth, Mailbox
storage growth, Enabled users, Expired and Soon-to-Expire Mailboxes) ---- there isn't any specific log for this, you would need to create some time of script to collect this every day for you and store it somewhere... This is a good start... http://www.stevieg.org/2011/06/exchange-environment-report/
Exchange Traffic Reports (Details on size and
amount of messages sent and recieved, Internet traffic [to and from], Traffic between exchange users) ----- This you can get from message tracking log... http://technet.microsoft.com/en-us/library/bb124375(v=exchg.150).aspx

Similar Messages

  • Hey guys need help regarding iTunes U. My school is moving for iOS and Mac in the classroom and I have been appointed Junior Administrator for the schools technical department and integrating these devices into the classroom.

    Hey guys need help regarding iTunes U. My school is moving for iOS and Mac in the classroom and I have been appointed Junior Administrator for the schools technical department and integrating these devices into the classroom.
    I have an appointment with a director on Tuesday. I want to demo iTunes U. Problem is I have never used it before and have no idea how to set it up and even if I should sign up.
    Please help any ideas regarding iTunes U and how I should direct the meeting tomorrow.
    Please please post here.
    Thanks
    Tiaan

    Greetings fcit@!A,
    After reviewing your post, it sounds like you are not able to select none as your payment type. I would recommend that you read this article, it may be able to help the issue.
    Why can’t I select None when I edit my Apple ID payment information? - Apple Support
    Thanks for using Apple Support Communities.
    Take care,
    Mario

  • Need help regarding the dunning form

    Hi,
    I have to display all the sales and payments of a cusomter for all the periods that are older than the run date in a dunning form. (i.e) if the run date is 04-aug-05 and if the slaes are there in 3 months(april, May, july) then i have to display three line items with sales and payments for that corresponding three months in the line items. As this is a dunning form i cannot change the print program. any table which have all the sales for a period which i can access directly in the script. can anyone suggest how to handle this.
    regards,
    Asha

    Hi,
    You can call a subroutine within a program (your z program)
    /:   PERFORM ADD_AMOUNT IN PROGRAM SAPLZFTP_F150
    /:           USING &W_AMOUNT&
    /:   ENDPERFORM
    In the z program create this subroutine.
          Form ADD_AMOUNT
         -->FT_INVAR  Text Symbol table for input  variables
         -->FT_OUTVAR Text Symbol table for output variables
    FORM add_amount TABLES ft_invar   STRUCTURE itcsy
                           ft_outvar  STRUCTURE itcsy.
      STATICS:
        w_value_l    TYPE  f150d-salfw.
            READ TABLE ft_invar INDEX 1.
            IF sy-subrc IS INITIAL.
    you can check all this part of the code how you want to
    process your data whether its numeric or character or
    whatever
               w_value_l = w_value_l + ft_invar-value.
            ENDIF. "IF sy-subrc IS INITIAL.
    ENDFORM.                    " ADD_AMOUNT
    TO BESPOKE THE PRINT PROGRAM FOR THE DUNNING
    Dunning outputs use the function module FI_DUNNING_PRINT_NOTICE. You can copy this to a Z function module and make some changes to the data selection. You will have to look into the code and decide what changes you need.
    The process to use a bespoke program to do the dunning print is as follows:
    UNDER FI GLOBAL SETTINGS in the configuration,
    There are Business Transaction Events. Within that you can configure the same to enable a Z function module in place of the standard function module (from the FUNCTION GROUP F150)
    • Create function group ZFTP_F150
    • Copy standard function module FI_PRINT_DUNNING_NOTICE of function group F150 to ZFTP_FI_PRINT_DUNNING_NOTICE in function group ZFTP_F150
    • Copy standard function module PRINT_DUNNING_NOTICE of function group F150 to ZFTP_PRINT_DUNNING_NOTICE in function group ZFTP_F150
    • Within the function module ZFTP_FI_PRINT_DUNNING_NOTICE, change function module call for PRINT_DUNNING_NOTICE to ZFTP_PRINT_DUNNING_NOTICE
    • Create a new include ZFTPI_ROUTINES within the function group and copy the subroutines LOG_MSG, LOG_MSG_TAB, & LOG_SYMSG from the function group F150 to this include
    AS AN ALTERNATE, YOU CAN COPY THE WHOLE FUNCTION GROUP
    • Maintenance view TBE31 (SM30). Change the function module from FI_PRINT_DUNNING_NOTICE to ZFTP_FI_PRINT_DUNNING_NOTICE against the event 00001720 FI-FI entry
    Hope this helps.
    regards,
    Satya

  • Need help with the "Location Services"

    Hello, I haven't seen another topic about this so this is why I'm posting this.
    Recently, I've been wanting to use some apps which use the Location Services(where they need your current location), but every time they try to use it, it either says "Your current location could not be determined" or just doesn't do anything.
    -I am using a 2g iPod touch 8GB
    -I am connected to a WiFi network and can access the web
    I read some guides on the apple website. One said that not all locations can be determined, so I'm not sure if I'm in one of those.
    If you can help me with this, please post a reply. :]
    Message was edited by: TheFungus
    Message was edited by: TheFungus

    Hi TheFungus: The basis of Location Services on the iPod Touch is a service called Skyhook. For skyhook to be effective it needs to locate to a wireless router that has been registered with their system. If your wireless router or others in the area aren't registered, it will have no way of knowing where you are located.
    Hope this helps
    Stedman

  • Need help regarding the few clarification in writing cmod

    Hi All,
      I need to write a cmod by creating a new project for that. The main purpose is to define variables in it which will be used in reporting(restrictions).
    Now  I need to enhance that structure with RSR00001 code since it dealys with declaring the variables.
    But this enhancement code is being used in some other project as well, because of it I am unable to use it in my project..
    Can you please explain me how can I overcome this situation.
    Thanks,
    vinay.

    Hi Vinay,
    Write this code in CMOD :
    data:
      z_include  type program,
    Z_return.   
    when others.
    * Select the include program using the variable
        perform select_include using    i_vnam
                               changing z_include
                                        z_return.
        check z_return = 0.
    * Check that include program exists
        perform check_include_program using    z_include
                                      changing z_return.
        check z_return = 0.
    * Process the appropriate variable by calling the generic form
    * 'PROCESS_VARIABLE' in the include program just selected
        perform process_variable in program (z_include)
                                 tables   e_t_range
                                          i_t_var_range
                                 using    i_vnam
                                          i_vartyp
                                          i_iobjnm
                                          i_s_cob_pro
                                          i_s_rkb1d
                                          i_periv
                                          i_step
                                          lv_zs_bsw_offset
                                 changing e_meeht
                                          e_mefac
                                          e_waers
                                          e_whfac
                                          c_s_customer.
    FORM select_include  using    p_var
                         changing p_include
                                  p_error.
      select single zinclude
        into p_include
        from zvariables
        where zvarname = p_var.
      p_error = sy-subrc.
    ENDFORM. 
    form check_include_program  using    p_include
                                changing p_error.
      data:
        l_name type programm.
      select single name
        into l_name
        from trdir
        where name = p_include.
      p_error = sy-subrc.
    endform.
    Then you can create a table having two column, variable value and its corresponding program.
    You will then not need to disturb the CMOD Code.
    -Vikram

  • I need help changing the account number my daughter uses for payment for her apps and itunes, etc. can anyone talk me through this.

    hi ,
    im just a mom, not very computer savy.....however, I need to change the payment method my daughter uses to purchase things on her ipad due to the fact that the current one is expiring. ie: for such things like songs and games, etc.
    I would appreciate any help as how to do so.
    THanks

    On a computer's iTunes you should be able to edit the payment info by going into the Store > View Account menu option (if you are not logged into the account that your daughter is using then Store > Sign menu option to log out of the currently logged in account ; that will then change to a Store > Sign In option so that you can log into her account) and log into the account (enter the account's password and click View Account on the popup)
    And on the account's details page there should be a payment link.
    If you are doing it on your iPad then tap on your id in Settings > iTunes & App Store (if not logged into her account then log out of your account via the popup that you get and then log in with her account) and tap on 'View Apple ID' on the popup and log into the account  - that should also give you a payments link on your account's page.
    Changing payment info : http://support.apple.com/kb/HT1918

  • Need help finding the desktop applc of Adobe Reader for Palm OS

    Either I'm going blind, or Adobe just failed to include a download link for that Adobe Reader desktop application that takes care of converting regular PDF files to PDB files. I
    Here is Adobe Reader for Palm OS page, there you'll find a link to download a Free AR for the Palm OS, which installs a PRC file in your Palm, but there is no mention of its counter part application for the desktop
    Thanks in advance guys,
    JDL
    Post relates to: Tungsten E2

    javierdl wrote:
    Thanks for your replies guys
    WN,  thanks for the suggestion. I had just tried it actually. And it's a great alternative. But after using the other one, I can't help but notice how slow it is in my Palm TX. I think I would prefer to get the benefit of compressing/converting the files to PDBs. But no one seems to know where to get that application. I checked in my TX CD and I didn't find it.
    If your TX installation CD does not "auto-run" and present you with a menu to install additional software (including Adobe Reader for Palm), you can find it on the disc using Windows Explorer at:
    Palm CD > Int_English >  Essential_software > Adobe Reader for Palm
    In that folder is the installation (.exe) file which you run on your desktop.  It installs the desktop app, and the .prc file gets installed to the quick installer during the process.
    FYI...this software is slow and clunky on the handheld.  The conversion process is imperfect, and particularly with files which I have produced myself using Acrobat Distiller (the part of Adobe Acrobat which lets you "print" to the distiller to create a .pdf file from anything),  it sometimes doesn't even work.
    The best .pdf viewer I have used on my handhelds is actually the upgraded version of Documents To Go, which handles native .pdf files pretty well.  No conversion needed, just drop the files into your SD card, or Hotsync with Documents To Go desktop.
    Post relates to: None
    smkranz
    I am a volunteer, and not an HP employee.
    Palm OS ∙ webOS ∙ Android

  • Need help regarding the maximum limit for data type

    Hi,
    this is Sravan. for my application am inserting the bulk data in XML format into a column of Database table.
    the sample inserted XML data will be in format... like
    '<ACC count = "10">
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    <Acc ac_no = "1111111111" cn_nr = "US" eflag = "Y" />
    </ACC>'
    this data in XML can have more than 1000 accounts.
    now, i need to take a Parameter value from XML node and write into a file. for this i have written a procedure by looping the Nodes from XML data and building Dynamic Query like..
    if nvl(v_int, 0) > 0 then
    v_sql := '';
         for v_count in 1..v_int
         loop
         if v_sql is null then
              v_sql := 'select extractvalue(empdetails, ''/ACC/Acc' || v_count ||'/@ac_no'')||extractvalue(empdetails, ''/ACC/Acc' || v_count
    ||'/@cn_nr'')||extractvalue(empdetails, ''/ACC/Acc' || v_count ||'/@eflag'') string from sample1';
         elsif v_sql is not null then
                   v_sql := v_sql || ' union all select extractvalue(empdetails, ''/ACC/Acc' || v_count ||'/@ac_no'')||extractvalue(empdetails, ''/ACC/Acc' || v_count
    ||'/@cn_nr'')||extractvalue(empdetails, ''/ACC/Acc' || v_count ||'/@eflag'') string from sample1';
              end if;
         end loop;
    end if;
    i will get this variable "v_int" from <ACC count = "10"> ACC count Attribute, here 10 is the value for v_int variable but in real time the variable value can be more than 1000.
    at the time of Building Dynamic Query I make using the Variable v_SQL which is of Data Type "Long",
    this variable stores dynamic query which is build at the time of executing procedure but this v_sql Variable is throughing Exception that ....
    "numeric or value error Character String Buffer is Too Small"... but Long Data type will store upto 2GB..
    this variable cant able to hold much data which is dynamically build.
    will you please help me to resolve this issue Or will u suggest me another method to pick the data from XML column.
    thanks,
    sravan.

    user11176969 wrote:
    i changed the code, now its working fine.
    direct assigning the dynamic query to a Clob variable raised error.
    for dynamic query building i used another variable and assigned this variable value to actual query variable.Nice!

  • Need Help regarding the JVM for the ARM926EJS Processor

    I Want to develop an application in java for the IMX.27 board which has ARM926EJS Procesor. This processor is jazelle enabled hardware.
    My questiion is that how to get the JVM for this. So that i will use my Java appliaction. I am using linux OS.
    Thanks in advance.

    Hi Narendra,
    Sun actually has a VM for the ARM ... well, actually 2 VMs for the ARM. Depending on your needs, there's a solution for JavaME CLDC, JavaME CDC, or JavaSE. There's also the open source implementations for CLDC and CDC. Here's how to get more info:
    JavaME: http://java.sun.com/javame/index.jsp
    CLDC open source project: phoneME Feature: https://phoneme.dev.java.net/content/phoneme_platforms.html#phonemefeature
    CDC open source project: phoneME Advanced: https://phoneme.dev.java.net/content/phoneme_platforms.html#phonemeadvanced
    Embedded SE: http://java.sun.com/j2se/embedded/offerings.html
    email inquiry to: [email protected]
    Regards,
    Mark

  • I need help regarding the Acrobat XI standard edition

    In fact I am using the X pro and i need to know about some features in XI standard

    Hi BSaadeh,
    Let me know your question about Acrobat.
    Regards,
    Ajlan Huda.

  • Need help picking the correct hard drive upgrade for my MBP

    I need help picking the correct/best hard drive upgrade for my MBP. It is the 15" 2GHz Core Duo. Came with a spacious 90GB drive.
    Suggestions and recommendations very appreciated.

    It will take almost any 2.5 inch sata drive.
    Take a look at www.newegg.com and www.macsales.com to see what's out there and how much it costs.
    Toshiba have a 320gb 2,.5 inch drive in the works, but it's not quite out yet and will be expensive.
    I'll start you off..
    http://www.newegg.com/Store/SubCategory.aspx?SubCategory=380&name=Laptop-Hard-Dr ives

  • Need Help Regarding Enabling The Matrix

    Hi All,
    We have got one user form and we have got one choose from list and one matrix, on click of choose from list the value will be displayed in the text box and at the same time matrix should get enabled. But it;s not happening in our case. The value is coming in the text box through choose from list but matrix is not getting enabled. We are able to change the back ground color of the matrix, make first column invisible and all but not able to enable the matrix. We need help regarding this one.
    Regards,
    Jayanth

    Hey first bind the columns of matrix to any user datasource
    and then you can enter any thing into your matrix 
    following code may help
    suppose you have one column
    oForm = SBO_Application.Forms.Item("URFRM")
    oUserDataSource = oForm.DataSources.UserDataSources.Add("URDSName",
    SAPbouiCOM.BoDataType.dt_SHORT_TEXT, 20)
    oMatrix=oForm.Item("URMATRX")
    oMatrix = oItem.Specific
    oColumns = oMatrix.Columns
    oColumn = oColumns.Item("URCOLName")
    oColumn.DataBind.SetBound(True, "", "URDSName")
    oMatrix.Addrow()
    hope this will help
    additionally you can look at this sample
    .....SAP\SAP Business One SDK\Samples\COM UI\VB.NET\06.MatrixAndDataSources

  • I need help regarding setting my mail accounts on macbook pro

    I need help regarding resetting my mail accounts on macbook pro

    What kind of accounts do you need to reset? IMAP or POP accounts using one of the many web-based messaging systems? An Exchange server account? Were they working and now just not working any longer?
    You're going to have to be a little more specific in what you need...
    Clinton

  • Need help regarding image scanning from scanner and resizing it...

    Hi,
    I need help regarding scanning of image directly from scanner. Here is the scenario when the person clicks scan button on the webpage should scan the image and resize it and store it in some temp location. Is there any way i can do this. Any Help regarding this would be great!!!
    Thanks,
    Avinash.
    Edited by: Kalakonda on Jul 24, 2009 8:08 AM

    Kalakonda wrote:
    I need help regarding scanning of image directly from scanner. Here is the scenario when the person clicks scan button on the webpage should scan the image and resize it and store it in some temp location. Is there any way i can do this. Any Help regarding this would be great!!!So what you are doing is you have a Scanner (hardware: like an HP flatbed scanner) attached to a server that you want to use as a scanning station? Is this the senario that you are talking about?

  • Need inputs regarding the dvd drive on primary ide channel.

    Specs:
    Motherboard: MSI P35 Neo3 (MS-7935 1.0)
    CPU: Intel Core2 Duo E6550
    Memory: Team Elite DDR2800 (2x1GB Dual Channel)
    Hard drive: Seagate Barracuda 7200.11 500GB 32MB Cache (SATA)
    Optical drive: LG GSA-H55L (IDE only) Firmware version 1.02
    Graphics card: Gecube HD3870
    Chipset: Intel P35/G33/G31 (Rev. A2)
    Southbridge: Intel 82801IB (ICH9)
    LPCIO: Fintek F71882F
    BIOS: AMI V1.1 (11/07/2007)
    Hello,
    Almost all new motherboards today only have a primary ide channel and the rest are SATA.
    I need inputs regarding the dvd drive which is shown in device manager as located on the primary ide channel while the hard drive is located on the secondary channel. Because I would like to update the dvd drive to the latest firmware (version 1.06; to be able to recognize more blank media) but the LG site recommends that the drive (dvd) be located on the secondary ide channel.
    I already tried to uninstall every channel from the device manager but all would still be the same after reboot, dvd drive on primary, hard drive on secondary.
    Current ide mode in BIOS is set to AHCI+IDE mode, DMA modes are fine (UDMA4 for dvd, UDMA5 for hard drive), boot sequence (1st=HD, 2nd=DVD, 3rd=Floppy drive)
    Tried switching to IDE mode only in BIOS but would not detect the optical drive. Never tried RAID+IDE mode since I only have a single hard drive.
    I'm not sure but if I try to update the firmware, it might instead try to update the hard drive's firmware instead of the optical drive and make the hard drive unusable.
    I would like to know if anybody with this same situation was able to successfully update the optical drive's firmware or is there some way to place the optical drive on the secondary ide channel and the hard drive on primary for me to follow and replicate the process.
    Thank you for any replies.

    Thanks sir NovJoe for the reply.
    Just received the solution from another forum where I posted the same problem.
    They said that the flash program for the firmware will detect the drive on its own and would not flash other devices except the optical drive itself. So its pretty safe, and I can confirm this since I just flashed my ODD a little over a while ago and everything went fine. No errors.
    Though I'm speaking for the brand of ODD I own and may be different for other brands so take precautions as well. It may be different for the others.

Maybe you are looking for

  • Use global temp table for DML error logging

    our database is 11.2.0.4 enterprise edition on solaris 10 we are wondering if anyone has an opinion of or has done this before, to use a global temp table for DML error logging. We have a fairly busy transactional database with 2 hot tables for inser

  • Deploying to Weblogic -Problem

    while mkin a new connection ie.deploying to weblogic its giving me "success" but then it gives an error Java Virtual Machine Launcher :cudnt find the main class ruchi

  • Adding single TV shows to iPod touch through itunes

    Hello, It seems that with the current version of itunes, you can only add seasons or the most recent 10 tv shows to your ipod. However as i have lots of tv shows in itunes, i would like to be able to add certain episodes. You can do this as movies bu

  • What is the difference using start condition and check function module

    what is the difference  between using start condition and check function module

  • T2000 Network Installation pause

    I'm seeing very strange behavior out of my two T2000 servers when I do a network installation. In short, it pauses for a very long time during the boot cycle. There is a pause for at least 45 minutes, sometimes even longer than that. Any help would b