Exchange Log & Troubleshoot

最後更新: 2019-07-29

 


Log

 

Enable smtp protocol log

Set-ReceiveConnector "My Receive Connector Name" -ProtocolLoggingLevel Verbose

Set-SendConnector "My Send Connector Name" -ProtocolLoggingLevel Verbose

Log file Location:

C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog
  • SmtpReceive/
  • SmtpSend/

 


設定重試間隔

 

  1. Expand "Server Configurations"
  2. Click Hub Transport
  3. Right-click the servername and click Properties.
  4. Click the Limits tab.
  5. Under the Message Expiration section, Maximum time since submission (days) field.

 

Transient failure retry attempts: 6 # 0~15

The number of connection attempts that are tried after the connection attempts controlled by
 the QueueGlitchRetryCount and QueueGlitchRetryInterval keys have failed.
If you set the value to 0, the next connection attempt is controlled by the "outbound connection failure retry interval".

 


IMAP ProtocolLog

 

Exchange 2010

Get-ImapSettings | format-list

LogFileLocation                   : C:\Program Files\Microsoft\Exchange Server\V14\Logging\Imap4
LogFileRollOverSettings           : Daily
LogPerFileSizeQuota               : 0 B (0 bytes)
ExtendedProtectionPolicy          : None
EnableGSSAPIAndNTLMAuth           : True
Server                            : EXSERVER

Set-ImapSettings -Server "EXSERVER" -ProtocolLogEnabled $true

OR

Set-ImapSettings -Server "EXSERVER" -ProtocolLogEnabled $true -LogFileLocation "C:\log"

Restart-Service MSExchangeImap4

Set-ImapSettings -Server "EXSERVER" -protocolLogEnabled $false

 


Exchange log

 

get-messagetrackinglog -EventId "RECEIVE"
  -Start "4/1/2021 12:00:00 AM" -End "5/31/2015 11:59:59 PM"
  -ResultSize unlimited
  | where {$_.Sender -like "*@sender.com"}
  | Select Timestamp,ClientIp,Sender

EventId

  • RECEIVE
  • REDIRECT
  • REDIRECT
  • TRANSFER
  • TRANSFER
  • DELIVER
  • DELIVER

ResultSize parameter

WARNING: There are more results available than are currently displayed. To view them, increase the value of the

get-mailbox -resultsize unlimited  ...

 


GUI

 

# Exchange 2010

發信

Eventid

RECEIVE(Source: SMTP) 之後 SEND(Source: SMTP)                   #  SAME Messageid, 會 log 到 IP 及 Subject

收信

Eventid

RECEIVE (Source: SMTP) 之後 DELIVER (Source: STOREDRIV)  # SAME Messageid