Re: Exchange 2003 log analyzers
From: Ben Winzenz [Exchange MVP] (ben_winzenz_at_NOSPAMdotmessageonedotcom)
Date: 12/16/04
- Next message: John Oliver, Jr. [MVP]: "Re: Synch OST file without opening Outlook?"
- Previous message: rick_cass: "Clean out a mailbox"
- In reply to: Sumner Paine: "Exchange 2003 log analyzers"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 16 Dec 2004 09:57:08 -0600
You aren't looking for something to analyze the Exchange logs, you are
looking for something that will analyze the actual Server Event logs.
Understand that when working with Exchange, when someone refers to Exchange
log files, the first thing that comes to mind is the actual transaction logs
that Exchange uses to record the transactions (such as e-mail) that it
performs. Those won't tell you anything regarding which accounts are
accessing which mailboxes.
I'd recommend to first of all enable Diagnostics logging in Exchange to
allow it to capture logons. Once you have done that, you can look at
products that analyze event logs. To enable Diagnostics logging, go to the
properties of your server in ESM, then go to the Diagnostics logging tab.
Next, go to MSExchange IS, Mailbox, then on the right, set logging to a
higher level for Logons. This will then log when user accounts log in to
mailboxes, those event will be logged to the Application logs as events 1009
and 1011.
-- Ben Winzenz Exchange MVP "Sumner Paine" <sumnerp@comcast.net> wrote in message news:32bbfiF3kfl0mU1@individual.net... > Can anyone recommend a log analyzer for Exchange 2003? My goal is to > easily search and report on which domain accounts are accessing mailboxes.
- Next message: John Oliver, Jr. [MVP]: "Re: Synch OST file without opening Outlook?"
- Previous message: rick_cass: "Clean out a mailbox"
- In reply to: Sumner Paine: "Exchange 2003 log analyzers"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|