Commands › Exchange Online
Get-MessageTrackingLog
Search for message delivery information stored in the message tracking log.
Quick start script
# Get-MessageTrackingLog — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org
# 2. Run and inspect
Get-MessageTrackingLog | Format-List
# 3. Export for evidence / drift tracking
Get-MessageTrackingLog | Export-Clixml .\MessageTrackingLog-$(Get-Date -Format yyyyMMdd).xmlSyntax
Get-MessageTrackingLog [-DomainController <Fqdn>]
[-End <DateTime>]
[-EventId <String>]
[-InternalMessageId <String>]
[-MessageId <String>]
[-MessageSubject <String>]
[-Recipients <String[]>]
[-Reference <String>]
[-ResultSize <Unlimited>]
[-Sender <String>]
[-Server <ServerIdParameter>]
[-Start <DateTime>]
[-NetworkMessageId <String>]
[-Source <String>]
[-TransportTrafficType <String>]
[<CommonParameters>]Parameters (15)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -DomainController | Fqdn | The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name... | |
| -End | DateTime | The End parameter specifies the end date and time of the date range. Message delivery information is returned up to, but not including, the specified date and time. | |
| -EventId | String | The EventId parameter filters the message tracking log entries by the value of the EventId field. The EventId value classifies each message event. Example values include DSN, Defer, Deliver, Send, or Receive. | |
| -InternalMessageId | String | The InternalMessageId parameter filters the message tracking log entries by the value of the InternalMessageId field. The InternalMessageId value is a message identifier that's assigned by the Exchange server that's... | |
| -MessageId | String | The MessageId parameter filters the message tracking log entries by the value of the MessageId field. The value of MessageId corresponds to the value of the Message-Id: header field in the message. If the Message-ID... | |
| -MessageSubject | String | The MessageSubject parameter filters the message tracking log entries by the value of the message subject. The value of the MessageSubject parameter automatically supports partial matches without using wildcards or... | |
| -Recipients | String[] | The Recipients parameter filters the message tracking log entries by the SMTP email address of the message recipients. Multiple recipients in a single message are logged in a single message tracking log entry.... | |
| -Reference | String | The Reference parameter filters the message tracking log entries by the value of the Reference field. The Reference field contains additional information for specific types of events. For example, the Reference field... | |
| -ResultSize | Unlimited | The ResultSize parameter specifies the maximum number of results to return. If you want to return all requests that match the query, use unlimited for the value of this parameter. The default value is 1000. | |
| -Sender | String | The Sender parameter filters the message tracking log entries by the sender's SMTP email address. | |
| -Server | ServerIdParameter | The Server parameter specifies the Exchange server where you want to run this command. You can use any value that uniquely identifies the server. For example: | |
| -Start | DateTime | The Start parameter specifies the start date and time of the date range. | |
| -NetworkMessageId | String | The NetworkMessageId parameter filters the message tracking log entries by the value of the NetworkMessageId field. This field contains a unique message ID value that persists across copies of the message that might... | |
| -Source | String | The Source parameter filters the message tracking log entries by the value of the Source field. These values indicate the transport component that's responsible for the message tracking event. For more information,... | |
| -TransportTrafficType | String | The TransportTrafficType parameter filters the message tracking log entries by the value of the TransportTrafficType field. However, this field isn't interesting for on-premises Exchange organizations. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.