How to find the top large email senders in exchange 2007 server? Is there any third party freeware tool is availble? **top large email senders with mail size. ThanksFunnyghost

Sure thing. Log Parser is your friend. The Exchange team blogged http://msexchangeteam.com/archive/2007/11/28/447598.aspx a couple of years ago. "FunnyGhost" wrote in message news:00a344b8-4099-4b56-b4b5-6e3946f701a7... How to find the top large email senders in exchange 2007 server? Is there any third party freeware tool is availble? **top large email senders with mail size. Thanks FunnyghostMark Arnold, Exchange MVP.

Yep, I have already used the log parser tool but it doesn't have "stats on WHO is sending out large files". It has only top senders. That mean, it is usually referred to as senders that are sending the most messages. Funnyghost

You can include sender-address. Will that not cut the mustard for you? That's one of the things. There are free tools that go so far and when you want something with additional bells and whistles that's when the old credit card has to come out. "FunnyGhost" wrote in message news:34f80424-ea26-4794-baf0-6dccca939456... Yep, I have already used the log parser tool but it doesn't have "stats on WHO is sending out large files". It has only top senders. That mean, it is usually referred to as senders that are sending the most messages. FunnyghostMark Arnold, Exchange MVP.

If I get the larger file sender details then I will target the communication to them not to send larger file.Funnyghost

Hi Funny Ghost, If you just want to let the users send limited size email, why not through managing message size limits? You could refer to below: http://technet.microsoft.com/en-us/library/bb124345(EXCHG.80).aspx And then, the users could not send larger file, you also have to find out them and warn them. :) Regards! gavin

Yep I know, its the good practice to set the limitation in exchange. But as of now I don't want set the limitations. If you aware of any tools (freeware tools) to find the tope large email senders please let me know. Also, is there any way to find the same using powershell? ThanksFunnyghost

Hi Funnyghost, Per my known, as refered by Mark, Log Parser is a very good tool for one want to check somting from the log, however, one must learn it more carefully and try to use it. You could use powershell as below command, and you would get the message size in MB in all hub transport queues to see if any larger message are bing sent. get-exchangeserver | where {$_.ishubtransportserver -eq "true"} | get-message –resultsize unlimited | Select-Object Identity,Subject,status,LastError,RetryCount,queue,@{Name="Message Size MB";expression={$_.size.toMB()}} | sort-object -property size –descending | export-csv c:\HubMessages.csv You also could use below command to find out the email size greater than 1M: get-messagetrackinglog -server "servername" -eventid "receive" -start "time" -end "time" | select-object sender,totalbytes | where {$_.totalbytes -gt "10000"} | sort-object totalbytes -descending | export-csv c:\testlog.csv Regards! gavin

Log Parser not helped in this issue. But Message trace tool and powershell did that. I have used the below CMDLET and got the expected output. get-messagetrackinglog -server "servername" -eventid "receive" -start "time" -end "time" | select-object sender,totalbytes | where {$_.totalbytes -gt "10000"} | sort-object totalbytes -descending | export-csv c:\testlog.csv Thanks Gavin, you da man!!Funnyghost