{"id":277,"date":"2015-04-29T10:20:57","date_gmt":"2015-04-29T08:20:57","guid":{"rendered":"http:\/\/www.michael.tassati.at\/?p=277"},"modified":"2015-04-29T10:20:57","modified_gmt":"2015-04-29T08:20:57","slug":"follow-the-message-through-exchange-logs","status":"publish","type":"post","link":"https:\/\/www.michael.tassati.at\/?p=277","title":{"rendered":"follow the message through Exchange logs"},"content":{"rendered":"

you have to enable connecotor logs with verbose log level!<\/p>\n

    \n
  1. find session id on receive in
    \nC:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpReceive
    \nsearch recipient or sender….you will find also the message id!!!<\/li>\n
  2. show all lines of this session
    \n@(Get-Content -Path „C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpReceive\\RECV20150429-1.LOG“) -match „08D24ED360CF3B98“ | Out-GridView
    \nsee connector id, etc.<\/li>\n
  3. find session id on send to hup
    \nC:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpSend
    \nsearch by message id, recipient or sender…<\/li>\n
  4. search session id in current log file of frontend send connectors
    \n@(Get-Content -Path „C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpSend\\SEND20150429-1.LOG“) -match „08D24ED360CF3B98“ | Out-GridView<\/p>\n

    do the same for\u00a0following files<\/li>\n

  5. C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\Hub\\ProtocolLog\\SmtpReceive\\RECV20150429-1.LOG<\/li>\n
  6. C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\Hub\\ProtocolLog\\SmtpSend\\SEND20150429-1.LOG<\/li>\n
  7. C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\Mailbox\\ProtocolLog\\SmtpReceive\\Delivery\\RECV20150429-1.LOG<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

    you have to enable connecotor logs with verbose log level! find session id on receive in C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpReceive search recipient or sender….you will find also the message id!!! show all lines of this session @(Get-Content -Path „C:\\Program Files\\Microsoft\\Exchange Server\\V15\\TransportRoles\\Logs\\FrontEnd\\ProtocolLog\\SmtpReceive\\RECV20150429-1.LOG“) -match „08D24ED360CF3B98“ | Out-GridView see connector id, etc. find session id on send to hup … follow the message through Exchange logs<\/span> weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[12,13,64,88,93,95],"_links":{"self":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/277"}],"collection":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=277"}],"version-history":[{"count":1,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/277\/revisions"}],"predecessor-version":[{"id":278,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/277\/revisions\/278"}],"wp:attachment":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}