This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 43%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFC%3C/text%3E%3C/svg%3E)
Morning , i have this question beacause i don't have found a solution , is possible to filter in exchange online a server on prem have sended some mail throught a SMTP in my enviroment ? inside this smtp don't have log enabled. in my infrastructure i have a application server with a service configured for use a internal smtp and that use 365 to send mails , my scope is to filter only mail sended from this only server, is possible ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Hi @Flavio Croce ,
I am writing to see if there is any progress on the thread. Have you had a chance to try the MessageTrace as suggested earlier? If any of the replies has been helpful, it would be appreciated that you can accept the useful post as Answer for others' referencing. If you are still looking for help on this, feel free to comment down below.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
What do you mean by "filter"?
If you want to allow only that one machine to use your transport then alter the permission on the transport to restrict access to just that machines' IP address.
i mean with word "filter" is to have a log in exchange online where there is the name or ip of application server on prem where have been the operations of send mails, throught smtp server. I don't have logs enable on smtp servers on prem and need this information for filter the mails of specific server
Maybe one of the Exchange folks can help you with this. But if it were me, I'd go with gathering the SMTP logs on your local server. I don't recall there being any automated way to the SMTP logs from O365 except through the web-based amin tools, and even with that you'll get only a CSV and not the logs.
Hi @Anonymous ,
my scope is to filter only mail sended from this only server, is possible ?
Do you mean you want to retrieve all mails sent from the application server? If so, as far as I know, from the perspective of Exchange Online, what we can do at present is to do a Content Search using some keywords or conditions. Are those mails sent through a specific email address? If this is the case, you can try creating a content search to find mails sent from the particular email address.
Get started with Content search
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Yes i know content search , but is possible only a filter from sender or receive mail , my scope is to filter all mails sended from a specific server
example
Get-MessageTrace -RecipientAddress xxxx@office365example.com, xxxx@office365example.com -StartDate (Get-Date).AddHours(-1) -EndDate (Get-Date) | fl
this powershell extracted the logs of this recipient address i would like to know if possible filter all messages from the specific server ip , and have the results all address sended from this one, i don t know if clear the explication
Thanks @Flavio Croce for the clarification. So, you are trying to get the message trace events of these mails, right? Have you tried using Get-MessageTrace with the -FromIP parameter and see if you can get the data you need?
See: Get-MessageTrace
The Get-MessageTrace cmdlet has both -FromIP and -ToIP parameters.
Keep in mind that you cannot retrieve information about message older than 10 days.
thx i check it
thx i check it
Sure, just check it at your convenience and should there's any update, you can feel free to post back.