Mail tracking query

Question

In a Hybrid Exchange environment i.e. Exchange 2016 and Exchange Online. The mail flow is centralized i.e. all emails first come to On-Prem mail hygiene device and then goes to the recipient.

One of the email for a mailbox that has moved to O365 when the email reached to Exchange On-Prem server it was stuck on the server for an hour and then it was handed to the Edge server and then to O365.

What message tracking to be run to find out the cause of delay from the On-Prem server ? We suspect this was due to Antivirus running on the on-prem exchange server but how to fetch this data.

can't use Get-MesageTrackingLogs because the mailbox does not exists on-Prem only the RemoteMailbox exists.

If I track from the O365 Exchange Admin center it does not shows the delay because the delay happened from the On-Prem server.

Answer 1

@Gautam

If message through your Exchange on-premises, you will could use Get-MesageTrackingLog for it:

Get-TransportService | Get-MessageTrackingLog -Sender "******@domain.com" -Recipients "******@oninedomain.com" -Start 5/10/2022 -End 5/18/2022 | Sort-Object Timestamp  

You will could know it stuck on which step.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 2

You can use message tracking on-prem. You search by the email address of the remote mailbox for the recipient