Transport logs for O365 Exchange online

Jay Cheah 21 Reputation points
2021-10-25T00:27:11.637+00:00

I'm facing the SMTP issues elaborated in https://learn.microsoft.com/en-us/answers/questions/586487/authentication-failed-because-the-remote-party-has-1.html

I'm curious if it's possible to see transport logs from Exchange Online service?
When logged into the 0365 Exchange admin centre i do not see anything that suggests I can view transport level logs - the logs that exist are the upper layers (i.e. message tracing).

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
2,904 questions
{count} votes

Accepted answer
  1. Vasil Michev 62,161 Reputation points MVP
    2021-10-25T06:50:21.623+00:00

    You cannot access transport logs, with O365 being a SaaS service and all. You can however get additional details from running detailed message trace, and the extended message trace: https://learn.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-eac

    Here's a sample output from the detailed trace:

    Detail             : Message received by: PA4PR03MB7183.eurprd03.prod.outlook.com using TLS1.2 with AES256  
    Data               : <root><MEP Name="ConnectorId" String="PA4PR03MB7183\Default PA4PR03MB7183"/><MEP Name="ClientIP" String="2603:10a6:20b:31e::22"/><MEP Name="ServerHostName"  
                         String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="FirstForestHop" String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="DeliveryPriority" String="Normal"/><MEP  
                         Name="ReturnPath" String="QnA-bounce@microsoft.com"/><MEP Name="CustomData" Blob="S:ProxyHop1=VE1EUR02FT023.mail.protection.outlook.com(10.152.12.132);S:ProxyHop2=AS8PR04CA0107.o  
                         utlook.office365.com(2603:10a6:20b:31e::22);S:tlsversion=SP_PROT_TLS1_2_SERVER;S:tlscipher=CALG_AES_256;S:OriginalFromAddress=QnA-bounce@microsoft.com"/><MEP  
                         Name="SequenceNumber" Long="0"/><MEP Name="RecipientReference" String=""/></root>  
    
    No comments

0 additional answers

Sort by: Most helpful