If it were me, I'd write a quick perl script or something that polls for only the stuff you want and sticks them in your own log dump area, be it a flatfile or database somewhere (there's also a gazillion tools that are already written out there that will do the same thing, but for cost.) There's other options too ... if you've got some sort of SMTP infrastructure in place you could configure the server to send traps for just the events you want.
Jon > -----Original Message----- > From: Hansen, Eric [mailto:[EMAIL PROTECTED]] > Sent: Friday, June 07, 2002 12:44 PM > To: Exchange Discussions > Subject: Moving SMTP events > > > Hi > > Exch 5.5 sp54 > Win2k sp2 > > I am wondering if there is a way to move the diagnostic > logging events for IMS to a custom event viewer or preferably > the security log. Here is why. > > I have a group of high paid *ahem* users that receive email > from potential clients, sometimes these users will start a > big problem with management claiming that certain people cant > email them and we are losing TONS of money because of it. In > a recent situation one of these users claimed this but it > turned out the user didn't check their email for 15 days. > > All of these users are pop/smtp, so I would like a way to log > their logon/logoff events but there is a catch. They logon > to a invisible SMTP that sits on the mailbox server so the > logon/logoff auditing gets mingled in with the other 1400 > users and the security log that is currently 10 meg only > stores for a few days. Id really like to only log > logon/logoff events for pop3/smtp and not normal mail clients. > > Any ideas? > > Thanks > e- > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
