skip to Main Content

Search message tracking logs in Exchange

How to search for message tracking logs by sender or recipient email address in Exchange? What if there is a tool that can search and show you the results. In this article, you will learn how. Let’s jump right into it.

Prepare the search message tracking logs script

Download the Exchange message tracking GUI script. Download from Microsoft Technet or use the direct link. Place the file in the following path: C:\scripts\.

Now that it is placed in the scripts folder. We like to run the Exchange message tracking GUI script.

Run Exchange Management Shell as administrator. Run the following commands.

The application will start:

Search message tracking logs in Exchange script default screen

Message tracking logs by sender

We like to search for all messages that have been sent by the user John Doe. The email address is john.doe@alitajran.com.

  1. Enable and enter the email address john.doe@alitajran.com
  2. Enable and set the eventID by selecting SEND from the drop-down menu
  3. Set the results to 100
  4. Run the script, let it do the work.

I recommend setting a small size of limit results. If you are sure that the information is correct and you need more data, change the limit results. If you want to see all the results, change the Limit Results to 0.

Press the start message tracking button. The Out-GridView will show the results:

If you need to export the results to CSV, click the CSV button. The export will be in the same directory path of your script. In this case it will be in the folder C:\scripts\.

Message tracking logs by recipient

We like to search for all messages that have been received by the user John Doe. The email address is john.doe@alitajran.com.

  1. Enable and enter the email address john.doe@alitajran.com
  2. Enable and set the eventID by selecting RECEIVE from the drop-down menu
  3. Set the results to 100
  4. Run the script, let it do the work.

I recommend setting a small size of limit results. If you are sure that the information is correct and you need more data, change the limit results. If you want to see all the results, change the Limit Results to 0.

Press the start message tracking button. The Out-GridView will show the results:

If you need to export the results to CSV, click the CSV button. The export will be in the same directory path of your script. In this case it will be in the folder C:\scripts\.

Track messages date and time

We like to search for all the messages that have been sent between 09:00 – 10:00.

  1. Enable and set the EventID by selecting SEND from the drop-down menu.
  2. Enable and set the date and time from 09:00 till 10:00
  3. Set the results to 1000
  4. Run the script, let it do the work.

I recommend setting a small size of limit results. If you are sure that the information is correct and you need more data, change the limit results. If you want to see all the results, change the Limit Results to 0.

Search message tracking logs in Exchange script send filter

Press the start message tracking button. The Out-GridView will show the results:

Search message tracking logs in Exchange script send filter result

If you need to export the results to CSV, click the CSV button. The export will be in the same directory path of your script. In this case it will be in the folder C:\scripts\.

Conclusion

In this article, you learned how to search message tracking logs in Exchange. Use the result button before exporting it to a CSV file. Did you make use of this great tool? If you enjoyed this article, you may also like Export a list of mailboxes to text in Exchange. Don’t forget to follow us and share this article.

ALI TAJRAN

ALI TAJRAN

ALI TAJRAN is a passionate IT Architect and IT Consultant. His specialism is designing and building complex enterprise environments. He started Information Technology at a very young age, and his goal is to teach and inspire others. Connect with ALI TAJRAN on social media. Read more »

This Post Has 0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

Back To Top