ActiveSync log column meanings.
Hi. I run a single domain-single exchange server environement. Recently, we've written into policy some standards we expect for users connecting to our Exchange 2007 server via their mobile device. I have been asked to now keep an eye on this and provide reports. I came across a great step by step to use the Export-ActiveSyncLogs cmdlet here: http://www.simple-talk.com/sysadmin/exchange/reporting-on-mobile-device-activity-using-exchange-2007-activesync-logs/ I followed it to the tee, and was successful in populating a database that I can connect to with Excel. However, I have not been able to find ANYWHERE the answer to the following question: What does "Total Emails Received" actually mean? I ask only because these numbers seem to be smaller than what I would expect them to be. The "Total Items Received" seems a little more in line. My guess is the "Total Emails Received" is when I actually open an email up completely, and the "Total Items Received" is every email header and subject that it downloads (not to mention any other contact or task or whatever) WITHOUT opening them up completely. I ask because I know my Iphone downloads 25 emails at a time, whenever I go into the mail section; but the database I created reports a "70" for "Total Emails Received". This seems in line only if my reasoning is correct. Can anyone help?
December 29th, 2010 2:03pm

Wow. No joy yet, huh? I will try and get the ball rolling myself then. It seems the log columns are from the servers perspective. "Total Emails Received" means that the server has received "sent email" from the client. I was able to verify this by going through my Outlook and filtering out all sent messages with my iphone's unique "disclaimer" at the bottom of the email. I then cross-checked the dates on those emails against my user in the database and noticed that everytime I sent a message on my iphone it registered as a "Total Email Received" on the server. So now my question is: IF "Total Emails Sent" REPRESENTS THE EMAILS THAT I GET ON MY CLIENT DEVICE, why does that number seem so low for all users??? I'd still like to get clarification between "Total Emails Sent" & "Total Items Sent". Both represent what the client is receiving from the server. Can anyone help me?
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2010 10:09am

Please install a windows mobile emulator and a new user for the testing Windows Mobile 6 Localized Emulator Images By sending and receiving a few messages, generate the report, and then compare the data directly with raw data in the IIS log, you should be able to determine what "Total Emails Sent" means. I think the “Cli:” and “Svr” should be the first to look at Exchange ActiveSync Reporting ServicesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
December 31st, 2010 4:56am

I have tested using both the emulator and my own iphone, re-running the Export-ActiveSyncLog cmdlet after each round of "downloading emails". What I have confirmed is the following: 1) The "Total Emails Sent" column is COMPLETELY UNRELIABLE. Using the emulator, I actually had the "Total Emails Sent" count go from 1 to 10, back to 1, back to 10, and then stay at 10....after what I perceived to be the downloading of emails to the Pocket PC emulator. As far as the iphone is concerned, I downloaded various emails, and also OPENED a few of them so that I could see the text......but there was NO CHANGE in the "Total Emails Sent" column for that particular device. After a couple rounds of 'downloading' and opening, it continued to stay at zero. So I would put no stock in trying to determine exactly how many emails were received by a user from the ActiveSync logs. 2) What you can reliably look at is: a. The different users that are connecting to Exchange with their mobile. b. The amount of Emails that were sent from the device. c. The dates those emails were sent. d. The type of device that was used. e. A "General" sense of the amount of traffic that is being generated by the user (in comparison with other mobile users whom you also have data on). I'm going to close with that unless someone can explain to me that THERE IS a reliable way to look at the amount of emails that were recieved by a device from the ActiveSync logs.
Free Windows Admin Tool Kit Click here and download it now
December 31st, 2010 10:43am

One more note here: My sense is also that, due to the difference in behavior of the "Total Emails Sent" column between the iphone and the windows mobile pocket pc emulators, there is a difference in the way these devices leave their "log trail". Again, I did see the "Total Emails Sent" column increment (and, unfortunately....decrement....WTF?)when I downloaded emails, but did not see a change from 'zero' with the iphone, in that same column, after downloading other various emails also.
December 31st, 2010 1:14pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics