Hi Running Exchange 2007 SP3, our Exchange domains are exchange.com and exchange2.com Management have asked for a list of all outgoing external email between 13:00 and 18:00 today. I know how to get all email but does anyone know how I can filter for only outbound email. Get-messagetrackinglog -eventID Send -start 07/27/2011 13:00 -end 07/27/2011 18:00 How can I add something to above that will filter for recipients not at exchange.com or exchange2.com? Many thanks in advance.

Use something like "EventID" eq "Send", these are typically email sent over the Send Connector. get-messagetrackinglog -EventID "SEND" -Start "7/28/2011 12:13:00 AM" -End "7/28/2011 12:23:00 AM" Are you sure this include internal recipients? Sukh

Hi Run this command [PS] C:\Documents and Settings\Raj-adm>Get-MessageTrackingLog -Server servername -ResultSize Unlimited -EventID SEND -Start 07/3/2011 -end 07/27/2011| Select Timestamp, ClientIp, ClientHostname, ServerIp, ServerHostname, SourceContext, ConnectorId, Source, EventId, InternalMessageId, MessageId, {$_.Recipients}, {$_.RecipientStatus}, TotalBytes, RecipientCount, RelatedRecipientAddress, {$_.Reference}, MessageSubject, Sender, ReturnPath, MessageInfo | Export-CSV C:\Temp\MyTest.Csv And filter the external email address from Recipients Column

Hi, Export the log to a CSV file and delete all the lines that include "exchange.com" and "exchange2.com" keywords Here is a very useful Script for Exchange 2007, it will give you a very detail report on message count http://blogs.technet.com/b/exchange/archive/2008/02/07/3404839.aspxPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.