where can I see logs of incoming mails' transactions? 1

[tekkanet]

Is it possible to view logs for transactions of correctly received mails and correctly sent out ones? I'm interested in sender address, date and destination address for received and sent mails.

For example I would like to see if my server ten days ago received a mail from userone@anexternaldomain.com

In Linux sendmail these information are by default into the /var/mail/maillog file together with other information.
I can then customize my sendmail to keep more or less information inside it.

With exchange (2003 SP1 in my case), with event viewer application log I can find informations about exceptions or problems, but not what I would like.
Perhaps any switch to activate anywhere?

thanks in advance.

Gianluca

 

[ShackDaddy]

You can turn on SMTP diagnostic logging, and I believe that will capture most of the information you are looking for.

In the Exchange Manager, drill down and find the server name and get properties on it. Go to the Diagnostic Logging tab. On the left side, choose MSExchangeTransport. On the right side, choose SMTP Protocol and set the logging level to Maximum. Now start watching your Application log. You will get a lot more information about your SMTP transactions.

ShackDaddy
Shackelford Consulting

 

[tekkanet]

I forgot to say that I already had set this "SMTP Protocol" parameter level to "Medium" a few months ago, for other purposes.
Is it correct to search inside event viewer application entries, so?
Where can I see differences between Medium and Maximum level properties to check?

 

[ShackDaddy]

I'm not sure of the answer to that. But you can get pure SMTP protocol logging by enabling it to dump to standard protocol log files. Check out this KB article that covers all the ways to pull SMTP logs:

http://support.microsoft.com/kb/821910

ShackDaddy
Shackelford Consulting

 

[ntinlin]

I think you actually want the Message Tracking Logs. You can configure them on or off and how long kept for in server policy.

You'd then use the Message Tracking Center to search through them.
Or you can use a script etc., they are just text files.

Neill