Hello, Correct me if I am wrong, but the below command should provide me all emails sent from the user 2 (sender) and the user1 (recipient) from the 06th of December. Get-agentlog StartDate "06/12/2009" | where {$_.Recipients like "user1@company.com" and $_.P1FromAddress -like "user2@company.com"} | fl I would like to know how could I check the quarantine messages?? (would it be | where {$_.Reason eq "BlockListProvider"} ) Thanks

I think it is... | where { $_.Action -eq "QuarantineMessage"} Amit Tank MVP: Exchange Server | MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSA: M Blog: http://ExchangeShare.WordPress.com | User Group: http:/MUC-UG.org.in

Thanks Amit, SHould I write it this way? Get-agentlog StartDate "06/12/2009" | where {$_.Recipients like "user1@company.com" and $_.P1FromAddress -like "user2@company.com" -and { $_.Action -eq "QuarantineMessage"} | fl

Almost near! :) Try this... Get-agentlog StartDate "06/12/2009" | where {$_.Recipients like "user1@company.com" and $_.P1FromAddress -like "user2@company.com" -and $_.Action -eq "QuarantineMessage"} | flAmit Tank MVP: Exchange Server | MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSA: M Blog: http://ExchangeShare.WordPress.com | User Group: http:/MUC-UG.org.in

It does do the job!! thanks Amit. Just wondering I have to check that on the Edge1 and edge2. If I connect on the Edge1 and run the command. Could I add a command such as -S Edge2 (somewhere in the shell command u gave me) to avoid connecting on the other edge??

Amit Strikes again :)))))Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

UnfortunatelyGet-Agentlog doesn't have parameter/switch to run on remote machine so you need to login on another server locally... Get-Agentlog http://technet.microsoft.com/en-us/library/aa996044.aspxAmit Tank MVP: Exchange Server | MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSA: M Blog: http://ExchangeShare.WordPress.com | User Group: http:/MUC-UG.org.in

Amit Strikes again :))))) Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3| LOL...! :)Amit Tank MVP: Exchange Server | MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSA: M Blog: http://ExchangeShare.WordPress.com | User Group: http:/MUC-UG.org.in

Thanks Amit for your time and help :-D

You're welcome! :)Amit Tank MVP: Exchange Server | MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSA: M Blog: http://ExchangeShare.WordPress.com | User Group: http:/MUC-UG.org.in