Office 365 Logs
Benefits of retrieving Office 365 message tracking logs
All on-premises Exchange administrators know it: Message Tracking Logs are the source to use when it comes to analyzing email traffic for reporting or for forensic search.
Message Tracking Log files contain email details, such as messages that travel between servers within the Exchange Organization.
Unfortunately, those Message Tracking Logs are no longer available with Office 365 and you need to use the Get-MessageTrace PowerShell command to retrieve information about messages.
What is even more problematic is that Office 365 only keeps this information for a maximum of 30 days. If you forget to retrieve it, it is gone forever.
This is where StoreLog comes to the rescue. It will let you retrieve message tracking logs from Office 365 so that you can easily archive these logs indefinitely and analyze the data at a time of your choice.
Benefits of StoreLog over the Get-MessageTrace PowerShell command
You can of course use the Get-MessageTrace PowerShell command to retrieve message tracking information, but this has some drawbacks:
- The maximum number of messages you can retrieve with a single command is 5,000. Thus is why you will need to issue successive commands with different parameters until you get them all. This is cumbersome and error prone.
- The retrieved events will be ordered in anti-chronological order: the first message of the day comes to the last line of the last file. Not very convenient!
StoreLog circumvents these drawbacks and features a graphical interface that lets you retrieve messages by date range. Then it generates daily message tracking logs with the following benefits:
- StoreLog is and will remain compatible with Office 365, as it uses the Get-MessageTrace PowerShell command.
- The format of generated Message Tracking Logs is similar to those of on-premise versions of Exchange, so it will remain familiar to you.
- Tracking events are sorted in chronological order, which makes them way easier to read than native logs.
- One single log file is generated per day: no need to scan multiple files to find that particular message.
- Last but not least it is free...
What to do with those Message Tracking Logs
Once you have Message Tracking Log files at hand on your hard drive, you can:
- Archive them for further processing.
- Open them in a text editor to search for a particular subject or recipient.
- Import them using StoreLog in an Access or SQL server database, and then use standard SQL queries to produce simple reports.
- • Import them using version 10 of Promodag Reports, which supports Office 365.