I am having trouble with message tracking only logging the event id "submit". Im not sure when it started, but i have the feeling that it may have started after I installed sp1. Its been a while since i was asked to run a tracking report but I know that as little as a month or two ago it was fine, logging all events. I have tried turning off message tracking, stopping all exchange services, andcopying off the logs to another location. Then I rebooted the box and turned tracking back on, only to resume loggingthe submit event only. Any suggestions are appreciated as I can find little help on this problem. Im running Exchange 2007 x64 sp1 with the post sp1 "Exchange2007-KB945684-x64-EN.msp"rollup installed.

Hi, Do you have more than one Exchange 2007 server and is this observed on the mail box server only? HUB transport server should show more Leif

Yes I do. I have one server with the hub transport and mailbox roles installed and I have a seperate server with client access installed for owa. The server that im running the reports against has both the hub and mailbox roles.

Its not a common issue at least cannot reproduce on my Lab, I have hub and mailbox server roles installed together, and SP1 with latest RU3 installed in the environment. According to my test, Message tracking log is complete which could be found on the default folder <C:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking> Based on the current information, I think you only can view the submit event because you only chosen submit event ID while using Message Tracking log analyzer in toolbox of the EMC. Actually, The Message Tracking tool in Toolbox of EMC is just a parser tool which exactly query required data from message tracking log files according to your conditions defined( such as you can define event ID and recipient and server etc by this tool). If I assumed correctly, now you can double check the message tracking log files directly, and let me know if it is completed. If yes, then you may run Message Tracking tool by uncheck any event ID, then the parser will query all event ID. Thanks, -Jason