First retrieve what is currently logged on a specific server. You can retrieve this information as follows :
Get-EventLoglevel -server Servername
This will retrieve a list similar to this :
MSExchange ActiveSync\Requests Lowest
MSExchange ActiveSync\Configuration Lowest
MSExchange Antispam\General Lowest
MSExchange Assistants\Assistants Lowest
MSExchange Autodiscover\Core Lowest
MSExchange Autodiscover\Web Lowest
MSExchange Autodiscover\Provider Lowest
MSExchange Availability\Availability Service Lowest
MSExchange Availability\Availability Service General Lowest
MSExchange Availability\Availability Service Authentication Lowest
MSExchange Availability\Availability Service Authorization Lowest
MSExchange Cluster\Move Lowest
MSExchange Cluster\Upgrade Lowest
MSExchange Cluster\Action Lowest
MSExchange Common\General Lowest
MSExchange Common\Configuration Lowest
MSExchange Common\Logging Lowest
MSExchange Extensibility\Transport Address Book Lowest
MSExchange Extensibility\MExRuntime Lowest
MSExchange EdgeSync\Synchronization Lowest
MSExchange EdgeSync\Topology Lowest
MSExchange EdgeSync\SyncNow Lowest
MSExchange TransportService\TransportService Lowest
MSExchange Web Services\Core Lowest
MSExchange IMAP4\General Lowest
MSExchange Messaging Policies\Journaling Lowest
MSExchange Messaging Policies\AttachFilter Lowest
MSExchange Messaging Policies\AddressRewrite Lowest
MSExchange Messaging Policies\Rules Lowest
MSExchange Messaging Policies\Prelicensing Lowest
MSExchange Anti-spam Update\HygieneUpdate Lowest
MSExchange Management Application\Shell Lowest
MSExchange Management Application\Console Lowest
MSExchange OWA\FormsRegistry Lowest
MSExchange OWA\Core Lowest
MSExchange OWA\Configuration Lowest
MSExchange OWA\Themes Lowest
MSExchange OWA\SmallIcons Lowest
MSExchange OWA\Proxy Lowest
MSExchange OWA\Transcoding Lowest
MSExchange OWA\ADNotifications Lowest
MSExchange POP3\General Lowest
MSExchange Process Manager\ProcessManager Lowest
MSExchange Repl\Service Lowest
MSExchange Repl\Exchange VSS Writer Lowest
MSExchange Search Indexer\General Lowest
MSExchange Search Indexer\Configuration Lowest
MSExchange Store Driver\General Lowest
MSExchange System Attendant Mailbox\General Lowest
MSExchange Topology\Topology Discovery Lowest
MSExchange ADAccess\General Lowest
MSExchange ADAccess\Cache Lowest
MSExchange ADAccess\Topology Low
MSExchange ADAccess\Configuration Lowest
MSExchange ADAccess\LDAP Lowest
MSExchange ADAccess\Validation Low
MSExchange ADAccess\Recipient Update Service Lowest
MSExchange ADAccess\Site Update Lowest
MSExchangeAL\Ldap Operations Lowest
MSExchangeAL\Service Control Lowest
MSExchangeAL\Attribute Mapping Lowest
MSExchangeAL\Account Management Lowest
MSExchangeAL\Address List Synchronization Lowest
MSExchangeIS\9000 Private\Transport General Lowest
MSExchangeIS\9000 Private\General Lowest
MSExchangeIS\9000 Private\Transport Sending Lowest
MSExchangeIS\9000 Private\Transport Delivering Lowest
MSExchangeIS\9000 Private\Transfer Into Gateway Lowest
MSExchangeIS\9000 Private\Transfer Out Of Gateway Lowest
MSExchangeIS\9000 Private\MTA Connections Lowest
MSExchangeIS\9000 Private\Logons Lowest
MSExchangeIS\9000 Private\Access Control Lowest
MSExchangeIS\9000 Private\Send On Behalf Of Lowest
MSExchangeIS\9000 Private\Send As Lowest
MSExchangeIS\9000 Private\Rules Lowest
MSExchangeIS\9000 Private\Storage Limits Lowest
MSExchangeIS\9000 Private\Background Cleanup Lowest
MSExchangeIS\9000 Private\DS Synchronization Lowest
MSExchangeIS\9000 Private\Views Lowest
MSExchangeIS\9000 Private\Download Lowest
MSExchangeIS\9000 Private\Local Replication Lowest
MSExchangeIS\9001 Public\Transport General Lowest
MSExchangeIS\9001 Public\General Lowest
MSExchangeIS\9001 Public\Replication DS Updates Lowest
MSExchangeIS\9001 Public\Replication Incoming Messages Lowest
MSExchangeIS\9001 Public\Replication Outgoing Messages Lowest
MSExchangeIS\9001 Public\Replication NDRs Lowest
MSExchangeIS\9001 Public\Transport Sending Lowest
MSExchangeIS\9001 Public\Transport Delivering Lowest
MSExchangeIS\9001 Public\MTA Connections Lowest
MSExchangeIS\9001 Public\Logons Lowest
MSExchangeIS\9001 Public\Access Control Lowest
MSExchangeIS\9001 Public\Send On Behalf Of Lowest
MSExchangeIS\9001 Public\Send As Lowest
MSExchangeIS\9001 Public\Rules Lowest
MSExchangeIS\9001 Public\Storage Limits Lowest
MSExchangeIS\9001 Public\Replication Site Folders Lowest
MSExchangeIS\9001 Public\Replication Expiry Lowest
MSExchangeIS\9001 Public\Replication Conflicts Lowest
MSExchangeIS\9001 Public\Replication Backfill Lowest
MSExchangeIS\9001 Public\Background Cleanup Lowest
MSExchangeIS\9001 Public\Replication Errors Lowest
MSExchangeIS\9001 Public\DS Synchronization Lowest
MSExchangeIS\9001 Public\Views Lowest
MSExchangeIS\9001 Public\Replication General Lowest
MSExchangeIS\9001 Public\Download Lowest
MSExchangeIS\9001 Public\Local Replication Lowest
MSExchangeIS\9002 System\Recovery Lowest
MSExchangeIS\9002 System\General Lowest
MSExchangeIS\9002 System\Connections Lowest
MSExchangeIS\9002 System\Table Cache Lowest
MSExchangeIS\9002 System\Content Engine Lowest
MSExchangeIS\9002 System\Performance Monitor Lowest
MSExchangeIS\9002 System\Move Mailbox Lowest
MSExchangeIS\9002 System\Download Lowest
MSExchangeIS\9002 System\Virus Scanning Lowest
MSExchangeIS\9002 System\Exchange Writer Lowest
MSExchangeIS\9002 System\Backup Restore Lowest
MSExchangeIS\9002 System\Client Monitoring Lowest
MSExchangeIS\9002 System\Event History Lowest
MSExchangeIS\9002 System\Database Storage Engine Lowest
MSExchangeMailboxAssistants\Service Lowest
MSExchangeMailboxAssistants\OOF Assistant Lowest
MSExchangeMailboxAssistants\OOF Library Lowest
MSExchangeMailboxAssistants\Resource Booking Attendant Lowest
MSExchangeMailboxAssistants\Email_Lifecycle_Assistant Lowest
MSExchangeMailSubmission\General Lowest
MSExchangeMU\General Lowest
MSExchangeSA\Clean Mailbox Lowest
MSExchangeSA\NSPI Proxy Lowest
MSExchangeSA\RFR Interface Lowest
MSExchangeSA\OAL Generator Lowest
MSExchangeSA\Proxy Generation Lowest
MSExchangeSA\RPC Calls Lowest
MSExchangeSA\RPC-HTTP Management Lowest
MSExchangeTransport\SmtpReceive Lowest
MSExchangeTransport\SmtpSend Lowest
MSExchangeTransport\DSN Lowest
MSExchangeTransport\Routing Lowest
MSExchangeTransport\Logging Lowest
MSExchangeTransport\Components Lowest
MSExchangeTransport\RemoteDelivery Lowest
MSExchangeTransport\Pickup Lowest
MSExchangeTransport\Categorizer Lowest
MSExchangeTransport\PoisonMessage Lowest
MSExchangeTransport\MessageSecurity Lowest
MSExchangeTransport\TransportService Lowest
MSExchangeTransport\Exch50 Lowest
MSExchangeTransport\Process Lowest
MSExchangeTransport\ResourceManager Lowest
MSExchangeTransport\Configuration Lowest
MSExchangeTransport\Storage Lowest
MSExchangeTransport\Agents Lowest
MSExchangeFDS\General Lowest
MSExchangeFDS\FileReplication Lowest
To change the value of the logging, use the Set-EventlogLevel in the Exchange Command-shell.
For example:
Set-EventLogLevel “Servername\MSExchangeSA\OAL Generator” -Level High
Set-eventloglevel -Identity ECIdParameter -Level Lowest | Low | Medium | High | Expert [CommonParameters]
Also see this article onhow to enable logging for the Microsoft Transport Suite for Domino.
Hans Sleurink
Hans Sleurink works as a Technical Consultant at Nexct in the Netherlands where he designs and deploys Microsoft Unified Communications solutions . His main focus is on, but not limited to, Exchange, Lync, Office 365, Active Directory, TMG and other UC related topics.
Follow Me:
