Search

Monday 24 October 2011

Exchange 2010 Log Tracking


I've been having grief with Exchange 2010 Tracking Log Explorer, main reason is I cannot easily do wildcard domain searches...
So, if your logs aren't too big and you want to search the physical log files.

1. Open a command prompt (not Powershell) as administrator on your CAS server
2. Go to the following location:
C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking

3. Type:

indstr -l "@searchdomain.com" *.log > C:\searchresults.csv

Replacing 'searchdomain.com' with the domain of your choice. Once the process is complete you will have a nice CSV file with all the log entries!

No comments:

Post a Comment