Message Tracking Log Mail Trace (Simple and Advance)

Command-

Simple 

Get-TransportServer | Get-MessageTrackingLog -ResultSize unlimited -sender SENDER@himanshu.com -Start "05/29/2020 23:59:00 PM" -End "05/31/2020 4:00:00 AM" | ft Sender,Recipients,Timestamp,Eventid

Advance

• Search for messages sent TO any users at domain.com: 

 Get-MessageTrackingLog -ResultSize Unlimited -Start "10/1/2013 8:30:00 PM" -End "10/25/2013 8:30:00 PM" | where{$_.recipients -like "*@domain.com"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients} | export-csv C:\ExchangeLogResults.csv

 

•  Search for messages sent FROM any users at domain.com:
  

Get-MessageTrackingLog -ResultSize Unlimited -Start "10/1/2013 8:30:00 PM" -End "10/25/2013 8:30:00 PM" | where{$_.sender -like "*@domain.com"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients} | export-csv C:\ExchangeLogResults.csv