Client FrontEnd connector logging

Question

Hello!

One more question, please.

I tried to monitor the sending and recieving mail in Thunderbird and was a bit lost: I do see the corresponding log records in the imap logs but can't find the records for the mail being sent - I expect them to appear in the C:\EXCHANGE\TransportRoles\Logs\FrontEnd\ProtocolLog\smtprecieve folder because the logging for the ClientFrontEnd recieve is enabled. I expect to see log records from my client's ip and port 587 - am I correct?

Regards,
Michael

Answer 1

@Mikhail Firsov

Yes, you could find logs about client IP from the (\TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive) for "Client Frontend" connector.

If you want to check emails from a specific IP address, you can also use the Message Tracking log, such as:

Get-TransportService | Get-MessageTrackingLog -Sender ******@domain.com | where{$_.OriginalClientIp -eq "192.168.2.52"}  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 2

Oh, sorry - forgot to enable logging for the second server :(, it works!