Searching message tracking logs

The Get-MessageTrackingLog cmdlet is a versatile tool that can be used to search the message tracking logs on mailbox servers. In this recipe, you'll learn how to use this Exchange Management Shell cmdlet to generate detailed reports on various aspects of mail flow within your organization.

How to do it...

The Get-MessageTrackingLog cmdlet has a number of available parameters that can be used to perform a search. To retrieve all the messages sent from a Mailbox server during a specified time frame, use the following syntax:

Get-MessageTrackingLog -Server mb1 `
-Start (Get-Date).AddDays(-1) `
-End (Get-Date) `
-EventId Send

Using this command, all the messages sent through SMTP from the mb1 server in the past 24 hours will be returned.

How it works...

Each Mailbox server role generates and collects message tracking logs. Message tracking is enabled by default, and the logs are stored in <install path>\V15\TransportRoles\Logs\MessageTrackingdirectory. Logfiles...