Yup, logparser made for a nice query and output that was far more usable! Thanks, jlc ________________________________________ From: Michael B. Smith [[email protected]] Sent: Monday, January 30, 2012 8:15 AM To: MS-Exchange Admin Issues Subject: RE: Analysing e2k10 transaction logs
You can still use the IIS logs (if you have them turned on) to see data VOLUME - which can track user, source ip, data read, data written, etc. However, that doesn't allow you to see actual data CONTENT. The process described here allows you to examine content. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist
