Jul 14

Search for messages in a specific timespan over multiple Exchange servers

It is not always so easy to track messages in Exchange 2013. At least not for me , i miss the old message tracker ! 🙂

Here is a command that i use frequently :

Get-ExchangeServer | where {$_.isHubTransportServer -eq $true -or $_.isMailboxServer -eq $true} | Get-MessageTrackingLog -Start “07/14/2014 8:00AM” -End “07/14/2014 5:00PM” -Recipients “user@domain.com” | Select-Object Timestamp,ServerHostname,ClientHostname,Source,EventId,Recipients | Sort-Object -Property Timestamp | ft


And here is the link for more parameters : http://technet.microsoft.com/en-us/library/bb124926(v=exchg.150).aspx