question

JayCheah-4151 avatar image
0 Votes"
JayCheah-4151 asked JayCheah-4151 commented

Transport logs for O365 Exchange online

I'm facing the SMTP issues elaborated in https://docs.microsoft.com/en-us/answers/questions/586487/authentication-failed-because-the-remote-party-has-1.html

I'm curious if it's possible to see transport logs from Exchange Online service?
When logged into the 0365 Exchange admin centre i do not see anything that suggests I can view transport level logs - the logs that exist are the upper layers (i.e. message tracing).

office-exchange-online-itpro
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

stumbled across https://techcommunity.microsoft.com/t5/exchange-team-blog/investigating-tls-usage-for-smtp-in-exchange-online/ba-p/609278
and can now see some logs against TLSx versus smtp auth clients, but not sure yet how to trace a message end to end including the transport security version used.

0 Votes 0 ·

1 Answer

michev avatar image
1 Vote"
michev answered

You cannot access transport logs, with O365 being a SaaS service and all. You can however get additional details from running detailed message trace, and the extended message trace: https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-eac

Here's a sample output from the detailed trace:

 Detail             : Message received by: PA4PR03MB7183.eurprd03.prod.outlook.com using TLS1.2 with AES256
 Data               : <root><MEP Name="ConnectorId" String="PA4PR03MB7183\Default PA4PR03MB7183"/><MEP Name="ClientIP" String="2603:10a6:20b:31e::22"/><MEP Name="ServerHostName"
                      String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="FirstForestHop" String="PA4PR03MB7183.eurprd03.prod.outlook.com"/><MEP Name="DeliveryPriority" String="Normal"/><MEP
                      Name="ReturnPath" String="QnA-bounce@microsoft.com"/><MEP Name="CustomData" Blob="S:ProxyHop1=VE1EUR02FT023.mail.protection.outlook.com(10.152.12.132);S:ProxyHop2=AS8PR04CA0107.o
                      utlook.office365.com(2603:10a6:20b:31e::22);S:tlsversion=SP_PROT_TLS1_2_SERVER;S:tlscipher=CALG_AES_256;S:OriginalFromAddress=QnA-bounce@microsoft.com"/><MEP
                      Name="SequenceNumber" Long="0"/><MEP Name="RecipientReference" String=""/></root>
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.