Blog Post

Exchange Team Blog
4 MIN READ

More fun with Logparser and Exchange logs

The_Exchange_Team's avatar
The_Exchange_Team
Icon for Microsoft rankMicrosoft
Sep 12, 2007
Right now there is no easy way to tell who is using Entourage, RPC/HTTP (Outlook Anywhere), Exchange ActiveSync, or OWA with what frequency.  I have found Logparser to be very helpful in answering a ...
Published Sep 12, 2007
Version 1.0
Deleted's avatar
Deleted
Sep 17, 2007
A while ago, logparser was very handy in helping identify our POP and IMAP users. First, you'll need to turn on POP and IMAP logging in Exchange System Manager (this is for 2003 btw, I have no idea about 2007) The logparser command I used (for POP) was as follows:

Logparser.exe -i:evt -o:CSV "select distinct message into pop_user.csv from \yourexchangeserverApplication where EventID = 1017 AND SourceName = 'POP3SVC'"