I've been having grief with Exchange 2010 Tracking Log Explorer, main reason is I cannot easily do wildcard domain searches...
So, if your logs aren't too big and you want to search the physical log files.
1. Open a command prompt (not Powershell) as administrator on your CAS server
2. Go to the following location:
C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
3. Type:
indstr -l "@searchdomain.com" *.log > C:\searchresults.csv
Replacing 'searchdomain.com' with the domain of your choice. Once the process is complete you will have a nice CSV file with all the log entries!
