I looked at the article - it's good. But I need to refine my second question, I suppose.
DL1 is a member of DL2 and DL3. It has two smtp addresses: [email protected] (primary) and [email protected] (secondary) - I don't like it, but that's how it is currently. When I run this fine one-liner: Get-MessageTrackingLog -Start "11/17/2015 12:00:00" -EventId Expand -resultsize unlimited | export-csv -notype c:\temp\report.csv I get nice output, with counts for the DLs I'm interested in. However I would like to know a couple of things: o- Does the message count for DL1 include the message counts for DL2 and DL3, because of the way expansion happens? If yes to the above, I believe I just need to do some simple math to arrive at the message count for emails sent directly to DL1 o- Is there a way to differentiate between emails sent to [email protected] and [email protected]? The messages end up going to the same DL, of course, but inquiring minds want to know... Thanks, Kurt On Tue, Nov 17, 2015 at 1:43 PM, Michael B. Smith <[email protected]> wrote: > You are looking at the wrong side of the barn door. > > A DG never has a deliver event. It's already been bifurcated, as many times > as necessary, to delivery destinations. > > You want to look at the RECEIVE event or the EXPAND event. > > I'm not sure what your second question means. Take a look at this article and > see if it answers your question. :-) > > http://exchangepedia.com/2009/02/are-distribution-groups-really-being-used.html > > -----Original Message----- > From: [email protected] [mailto:[email protected]] > On Behalf Of Kurt Buff > Sent: Tuesday, November 17, 2015 3:21 PM > To: [email protected] > Subject: [Exchange] Problem counting/tracking emails - exchange 2010, fully > patched > > I'm having a wee problem with get-messagetrackinglogs. > > 2 problems, actually. > > I'm running the commands below on our combined DB/Hub server... > > First: I have a DL that I'm trying to track - we want the number of emails it > has received. > > When I use this: > > Get-MessageTrackingLog -ResultSize Unlimited -Start -Recipients > [email protected] -EventID DELIVER > > I see no results, but when I parse the SMTP logs, I see lots of results for > all of the SMTP addresses. > > When I use my own email address in get-messagetrackinglog, I see my results. > What gives? > > Second: the DL I'm looking after is actually a member of 8 or 9 other DLs. > I've tried putting all of their SMTP addresses in the recipients field, with > comma delimiters and both with and without double quotes, and I'm getting an > error when I do that. SFTW hasn't shown me anything regarding them - or > rather one of the errors shows no results, the other shows a few people > having the problem and no particular resolution that I can find. > > The error I'm seeing is: > The server software doesn't support the type of search requested. > + CategoryInfo : InvalidOperation: (:) > [Get-MessageTrackingLog], LocalizedException > + FullyQualifiedErrorId : > 65B97638,Microsoft.Exchange.Management.TransportLogSearchTasks.GetMessageTrackingLog > > Any help would be much appreciated. > > Kurt > >
