How to identify system generated emails in the E2007/2010 message tracking logs?
What's the best way to identify system generated emails (delivery/read receipts, quota warnings, etc) in the message tracking logs? [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
January 14th, 2011 6:49am

Hi, Have you tried tracking mail from "System Administrator" as sender??Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Free Windows Admin Tool Kit Click here and download it now
January 14th, 2011 10:49am

The "sender" property of the messages tracking log entries is just the smtp address. There is no "friendly name" field there to test.[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
January 14th, 2011 1:00pm

Hi, What about creating a special recipient for the system message? AllenAllen Song
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2011 12:29am

I could, but it's for a script for getting message stats from the message tracking logs. I'd lke for it to be portable without needed to make changes to the system for it to work right.[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
January 17th, 2011 9:12am

Hi, Have you tried using logparser it might help : http://msexchangetips.blogspot.com/2006/09/exchange-exporting-and-querying.html http://anonymoos.com/logparser.php http://msexchangeteam.com/archive/2007/11/12/447515.aspx Do let us know if this doesn't help.Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2011 9:52am

I don't understand what advantage using logparser might have. What can logparser tell me about whether a particular email was system generated or user generated that powershell cannot? [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
January 17th, 2011 1:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics