Trying to pull emails for last 3 months on Exchange 2013 server but doesn't pull older emails.

Problem

======

Unable to pull emails for last 3 months on Exchange 2013 server but doesn't pull older emails.

I've Exchange 2013 Version 15.0 (Build 1076.9) latest CU.

Get-MessageTrackingLog -Recipients xxxx@ABC.COM -Start "04/01/2015 00:01 AM" -End "07/01/2015 10:30 PM" -EventId RECEIVE -Resultsize unlimited| select EventId, TimeStamp,sender, @{N="Recipients";E={$_.recipients -join ","}}, MessageSubject

It just pulls email after 10/06/2015 date. doesn't pulls email before that date. We have Message tracking logs age set to 90 days and I can see logs present on the server itself.

I've tried command without entering any date but doesn't like that as well.

July 1st, 2015 6:20am

Just try to run the message tracking for a smaller period like -Start "04/01/2015 00:01 AM" -End "04/10/2015 10:30 PM"

and see if you can get any re

Free Windows Admin Tool Kit Click here and download it now
July 1st, 2015 7:11am

Thanks for reply. I've tried that as well. didn't pull anything. In fact doesn't take time to complete command. 
July 1st, 2015 7:20am

Hi,

Did you remember when you change the age of message tracking log to 90 days? And whats the oldest date of the message tracking log on the server?

Best Regards.

Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2015 10:28pm

I think age may have set at the time of server built, 1.5 yrs back and I can see message tracking logs for last 90 days. What other thing that, I've noticed is Files during Indexing folders just have files for last 20 days

I've tried rebuilding the Indexing for message tracking and that did re-generated again indexing logs for 20 days and not for 90 days.

July 3rd, 2015 1:57am

Hi Bala,

The Start parameter specifies the start date and time of the date range.

Use the short date format defined in the Regional Options settings for the computer on which the command is run. For example, if the computer is configured to use the short date format mm/dd/yyyy, enter 03/01/2010 to specify March 1, 2010. You can enter the date only, or you can enter the date and time of day. If you enter the date and time of day, you must enclose the argument in quotation marks ("), for example, "10/05/2010 5:00 PM".

Run this on your server locally to find out the timestamp format used.

Get-MessageTrackingLog -ResultSize 1 | fl timestamp

(Get-MessageTrackingLog -ResultSize 1).timestamp

[datetime]"04/01/2015 00:01 AM"

[datetime]"07/01/2015 10:30 PM"

I think you are looking for Jan 2015 records.

So try this as well:

Get-MessageTrackingLog -Start "01/04/2015 00:01 AM" -End "01/07/2015 10:30 PM"		
Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2015 3:09am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics