XADM: How to Use Message Tracking Logs to Identify Oversized Messages

MORE INFORMATION

To use message tracking to identify oversize messages:

1. Use Microsoft Excel to open the tracking log file that is located in the Exchsrvr folder (Exchsrvr\Tracking.log). You are prompted to choose the type of file that best describes the data. Click Delimited, and then click Finish.
2. Click the upper left corner of the table to select all.
3. On the Data menu, click Sort. Under Sort By, click Column I, and then click Descending. Click OK.

The first row of the table now contains the details of the largest message that was sent during the 24-hour period that the log recorded.

Column A contains the message ID or MTS ID of the message.

Column G contains the distinguished name (DN) of the originating mailbox; the DN is used to identify the mailbox. Make sure that mailboxes that send or receive large messages that affect server performance negatively have limits placed on them.

Column I contains the size of the message in bytes.

More detailed information on the format of the message tracking logs can be found in the Books Online, in the Microsoft Exchange Server Administrator's Guide, Chapter 17, page 64.

Crystal Reports, in the BackOffice Resource Kit, can generate better reports by using information from the Exchange Server Tracking Logs.