OK! Well, then I'm not going to worry about differentiating those. I
suppose if I really need it, I can take a look at the SMTP logs on the
hub transport.

Thank you again for the help.

Kurt

On Tue, Nov 17, 2015 at 3:22 PM, Michael B. Smith <[email protected]> wrote:
> [1] Yes
>
> [2] Not to my knowledge, using standard tools. Addresses are resolved to the 
> primary at p1 (almost step 1 of transport submission). There is a HUGE (meant 
> to be printed on 24"x36", I think) very detailed diagram/outline of the 
> Transport service for 2010.
>
> http://www.microsoft.com/en-us/download/details.aspx?id=21987
>
> See the section titled "Categorizer".
>
> To do what you want would require a transport "hook" at the entry prior to 
> OnSubmittedMessage. Can it be done? Yes. Is it trivial? No.
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] 
> On Behalf Of Kurt Buff
> Sent: Tuesday, November 17, 2015 5:37 PM
> To: [email protected]
> Subject: Re: [Exchange] Problem counting/tracking emails - exchange 2010, 
> fully patched
>
> I looked at the article - it's good.
>
> But I need to refine my second question, I suppose.
>
> DL1 is a member of DL2 and DL3. It has two smtp addresses:
> [email protected] (primary) and [email protected] (secondary) - I don't like 
> it, but that's how it is currently.
>
> When I run this fine one-liner:
>
>      Get-MessageTrackingLog -Start "11/17/2015 12:00:00" -EventId Expand 
> -resultsize unlimited | export-csv -notype c:\temp\report.csv
>
> I get nice output, with counts for the DLs I'm interested in. However I would 
> like to know a couple of things:
>
> o- Does the message count for DL1 include the message counts for DL2 and DL3, 
> because of the way expansion happens?
>      If yes to the above, I believe I just need to do some simple math to 
> arrive at the message count for emails sent directly to DL1
>
> o- Is there a way to differentiate between emails sent to [email protected] 
> and [email protected]? The messages end up going to the same DL, of course, 
> but inquiring minds want to know...
>
> Thanks,
>
> Kurt
>
> On Tue, Nov 17, 2015 at 1:43 PM, Michael B. Smith <[email protected]> 
> wrote:
>> You are looking at the wrong side of the barn door.
>>
>> A DG never has a deliver event. It's already been bifurcated, as many times 
>> as necessary, to delivery destinations.
>>
>> You want to look at the RECEIVE event or the EXPAND event.
>>
>> I'm not sure what your second question means. Take a look at this
>> article and see if it answers your question. :-)
>>
>> http://exchangepedia.com/2009/02/are-distribution-groups-really-being-
>> used.html
>>
>> -----Original Message-----
>> From: [email protected]
>> [mailto:[email protected]] On Behalf Of Kurt Buff
>> Sent: Tuesday, November 17, 2015 3:21 PM
>> To: [email protected]
>> Subject: [Exchange] Problem counting/tracking emails - exchange 2010,
>> fully patched
>>
>> I'm having a wee problem with get-messagetrackinglogs.
>>
>> 2 problems, actually.
>>
>> I'm running the commands below on our combined DB/Hub server...
>>
>> First: I have a DL that I'm trying to track - we want the number of emails 
>> it has received.
>>
>> When I use this:
>>
>>      Get-MessageTrackingLog -ResultSize Unlimited -Start -Recipients
>> [email protected] -EventID DELIVER
>>
>> I see no results, but when I parse the SMTP logs, I see lots of results for 
>> all of the SMTP addresses.
>>
>> When I use my own email address in get-messagetrackinglog, I see my results. 
>> What gives?
>>
>> Second: the DL I'm looking after is actually a member of 8 or 9 other DLs. 
>> I've tried putting all of their SMTP addresses in the recipients field, with 
>> comma delimiters and both with and without double quotes, and I'm getting  
>> an error when I do that. SFTW hasn't shown me anything regarding them - or 
>> rather one of the errors shows no results, the other shows a few people 
>> having the problem and no particular resolution that I can find.
>>
>> The error I'm seeing is:
>> The server software doesn't support the type of search requested.
>>     + CategoryInfo          : InvalidOperation: (:)
>> [Get-MessageTrackingLog], LocalizedException
>>     + FullyQualifiedErrorId :
>> 65B97638,Microsoft.Exchange.Management.TransportLogSearchTasks.GetMess
>> ageTrackingLog
>>
>> Any help would be much appreciated.
>>
>> Kurt
>>
>>
>
>


Reply via email to