Transport logs for O365 Exchange online

Question

I'm facing the SMTP issues elaborated in https://learn.microsoft.com/en-us/answers/questions/586487/authentication-failed-because-the-remote-party-has-1.html

I'm curious if it's possible to see transport logs from Exchange Online service?
When logged into the 0365 Exchange admin centre i do not see anything that suggests I can view transport level logs - the logs that exist are the upper layers (i.e. message tracing).

Answer 1

You cannot access transport logs, with O365 being a SaaS service and all. You can however get additional details from running detailed message trace, and the extended message trace: https://learn.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-eac

Here's a sample output from the detailed trace:

Detail             : Message received by: PA4PR03MB7183.eurprd03.prod.outlook.com using TLS1.2 with AES256  
Data               : <root><MEP Name="ConnectorId" String="PA4PR03MB7183\Default PA4PR03MB7183"/><MEP Name="ClientIP" String="2603:10a6:20b:31e::22"/><MEP Name="ServerHostName"  
                     String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="FirstForestHop" String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="DeliveryPriority" String="Normal"/><MEP  
                     Name="ReturnPath" String="QnA-bounce@microsoft.com"/><MEP Name="CustomData" Blob="S:ProxyHop1=VE1EUR02FT023.mail.protection.outlook.com(10.152.12.132);S:ProxyHop2=AS8PR04CA0107.o  
                     utlook.office365.com(2603:10a6:20b:31e::22);S:tlsversion=SP_PROT_TLS1_2_SERVER;S:tlscipher=CALG_AES_256;S:OriginalFromAddress=QnA-bounce@microsoft.com"/><MEP  
                     Name="SequenceNumber" Long="0"/><MEP Name="RecipientReference" String=""/></root>