Q. How can I use the command line to quickly search Microsoft Exchange Server 2007 message tracking information?

Windows\System32>Get-MessageTrackingLog -server savdalex01 -messagesubject "Batman" -sender bruce@savilltech.net

The return would be:

EventId Source Sender Recipients MessageSubject
-------------------------------------------
RECEIVE STORE... bruce@savilltech.net {clark@savilltech... Batman is the best
DELIVER STORE... bruce@savilltech.net {clark@savilltech... Batman is the best
SUBMIT STORE... bruce@savilltech.net {} Batman is the best

This output shows only some detail. If you added "| fl" to the end of the command, the output would return a list with more information, similar to the following code and return:

Windows\System32>Get-MessageTrackingLog -server savdalex01 -messagesubject "batman" -sender bruce@savilltech.net | fl

The return would be:

Timestamp : 3/11/2008 11:08:07 AM
ClientIp : fe80::5de2:b09f:7c88:bb73
ClientHostname : savdalex01.savilltech.net
ServerIp : fe80::5de2:b09f:7c88:bb73%10
ServerHostname : savdalex01
SourceContext :
ConnectorId :
Source : STOREDRIVER
EventId : RECEIVE
InternalMessageId : 1
MessageId : <6A41D17A924EE74E81753F40A83AE1860D2ECB690B@savdalex0
1.savilltech.net>
Recipients : {clark@savilltech.net}
RecipientStatus : {}
TotalBytes : 3601
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : Batman is the best
Sender : bruce@savilltech.net
ReturnPath : bruce@savilltech.net
MessageInfo : 04I:

There are a number of other commands you can use, including a start and end date and time (-start and -end), the number of results to return (-resultsize), and a list of the recipients (-recipients). For a full list of options, use the command:

Get-help get-messagetrackinglog -detailed

End of Article