Re: How do I extract emails from log files

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Jeff Middleton [SBS-MVP] (jeff_at_cfisolutions.com)
Date: 03/13/04


Date: Fri, 12 Mar 2004 18:04:58 -0600

My advice would be that you contact MS PSS and have them assist you if this
is not a situation you are familiar with. Time and money suggest it's worth
the money to get them to help you with the time, and the penalty for doing
things wrong, or getting confused further is pretty high.

Basically, the technique involved is to force the replay of the logs you
have to update the transactions to the Store, and determine which logs can
be purged, which require additional work. Normally, you need to have all the
logs from the last time a full-backup of the Exchange caused a commit of the
logs.

Failing to properly handle the replay of the logs can cause loss of
information, and potentially even lose information already in the Store.
When it works, it's simple, when it doesn't, you don't like the frustation
of being by yourself.

You really can't easily do this without taking the Exchange Server offline
and reruning the system to introduce the emails back to the previous backup
state, then exporting those contents with Exmerge, then reimporting the
Exmerged files back into the (relatively speaking) future condition you now
have if you have already put the server back online without addressing this
condition first.

I've been in similar situations, and to be honest, when explained to the
customer the time, cost, and issues involved, more often than not in an SBS
scale world....you write off the emails and move on.

"dave satchell" <dave_satchell@hotmail.com> wrote in message
news:bfd101c40880$ff3ed340$a301280a@phx.gbl...
> I have a client that had some email problems that I have
> since fixed but they are missing some email that came in
> after the last backup. I copied the entire exchange
> folder to another drive because the files were corrupt
> and I was doing a restore from tape but didn't want to
> loose anything.
>
> So now I have this folder with all of the new but corrupt
> stuff. What I want to do is extract the emails just from
> a particular day (3/12/04).
>
> How can I do this?
>
> Thanx, Dave.



Relevant Pages

  • Re: Email Accounts are not being created automatically.
    ... I have already tried restarting the services, ... far as the logs, I haven't had any Exchange errors in the logs. ... >> but the emails are not being created. ...
    (microsoft.public.exchange.admin)
  • Re: Single Exchange 2000 Mailbox Recovery
    ... the money as suggested or simply build a recovery server to save the money. ... > emails -- ... > Unfortunately, all our Exchange backups are FULL store backups, not ... > Does anyone know an easy way to recover this ex-employee's emails to her ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Exchange private store growing by 10GB per day after SP2
    ... shutdown groups of PC's, does the growth stop? ... If a virus was sending into Exchange it may ... be being recognised as such and deleted, accounting for logs and database ... number of emails coming in or out (about 200 total emails yesterday and ...
    (microsoft.public.windows.server.sbs)
  • Re: Missing Emails in Inbox and Exchange 2007 User Action Log
    ... His Outlook only has Exchange OST file, no PST file. ... folder and only for the emails of the last two months? ... My point is if Exchange 2007 keeps logs of user actions such as deleting ...
    (microsoft.public.exchange.admin)
  • Re: Help!
    ... My partner deleted all logs except for the ... When we open Outlook we can see all the emails as far ... You need to be doing full nightly backups of your Exchange ...
    (microsoft.public.exchange.admin)