Home
%3CLINGO-SUB%20id%3D%22lingo-sub-588784%22%20slang%3D%22en-US%22%3EExtending%20Message%20Trace%20to%2090%20days%20in%20Exchange%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-588784%22%20slang%3D%22en-US%22%3E%3CP%3E%3C%2FP%3E%3CP%3E%3CA%20title%3D%22See%20'Trace%20an%20Email%20Message'%20for%20more%20info%22%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj200668%2528v%3Dexchg.150%2529.aspx%22%20class%3D%22bold%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMessage%20trace%3C%2FA%3Eenables%20administrators%20to%20trace%20email%20messages%20as%20they%20pass%20through%20Exchange%20Online%20or%20Exchange%20Online%20Protection%20(EOP)%20service.%20It%20helps%20you%20determine%20whether%20a%20message%20was%20received%2C%20rejected%2C%20deferred%2C%20or%20delivered%20by%20the%20service.%3C%2FP%3E%20%20%3CP%3EYou%E2%80%99ve%20told%20us%20that%20you%20need%20to%20be%20able%20to%20trace%20messages%20older%20than%20the%20current%20period%20of%20one%20week.%20We%E2%80%99re%20excited%20to%20announce%20that%20we%E2%80%99re%20increasing%20the%20look%20back%20period%20for%20message%20trace%20in%20Exchange%20Online%20to%2090%20days!%3C%2FP%3E%20%20%3CP%3EThe%20existing%20functionality%20of%20looking%20up%20messages%20for%20the%20last%20week%20will%20persist%20and%20those%20results%20will%20be%20viewable%20immediately.%20When%20you%20search%20for%20messages%20older%20than%20a%20week%2C%20the%20request%20will%20be%20submitted%20as%20an%20%3CEM%3Eextended%20message%20trace%20request%3C%2FEM%3E.%20After%20the%20request%20has%20been%20processed%2C%20the%20trace%20results%20will%20be%20delivered%20to%20you%20in%20a%20CSV%20file%20by%20email.%20An%20example%20of%20an%20extended%20message%20trace%20request%20is%20shown%20below.%3C%2FP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Flegacyfs%2Fonline%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F31%2F06%2Fmetablogapi%2FEO-ExtendingMessageTrace_7557FEFA.png%22%20original-url%3D%22http%3A%2F%2Fblogs.technet.com%2Fcfs-file.ashx%2F__key%2Fcommunityserver-blogs-components-weblogfiles%2F00-00-00-31-06-metablogapi%2FEO_2D00_ExtendingMessageTrace_5F00_7557FEFA.png%22%20target%3D%22_blank%22%3E%3CIMG%20title%3D%22EO-ExtendingMessageTrace%22%20style%3D%22display%3Ainline%3Bbackground-image%3Anone%3B%22%20border%3D%220%22%20alt%3D%22EO-ExtendingMessageTrace%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Flegacyfs%2Fonline%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F31%2F06%2Fmetablogapi%2FEO-ExtendingMessageTrace_thumb_2581DA6F.png%22%20original-url%3D%22http%3A%2F%2Fblogs.technet.com%2Fcfs-file.ashx%2F__key%2Fcommunityserver-blogs-components-weblogfiles%2F00-00-00-31-06-metablogapi%2FEO_2D00_ExtendingMessageTrace_5F00_thumb_5F00_2581DA6F.png%22%20width%3D%22633%22%20height%3D%22481%22%20%2F%3E%3C%2FA%3E%3CP%3EWe%E2%80%99re%20already%20rolling%20out%20this%20feature.%20Look%20for%20more%20details%20later%20this%20month.%3C%2FP%3E%20%20%3CP%3EThis%20feature%20applies%20to%20Exchange%20Online%20and%20Exchange%20Online%20Protection%20services.%20On-premises%20customers%20have%20the%20capability%20to%20manage%20and%20search%20%3CA%20title%3D%22See%20'Message%20Tracking'%20in%20Exchange%202013%20documentation%22%20class%3D%22bold%22%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fbb124375%2528v%3Dexchg.150%2529.aspx%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%20target%3D%22_blank%22%3Emessage%20tracking%3C%2FA%3Elogs%20in%20Exchange%20Server.%3C%2FP%3E%20%20%3CP%3EWant%20to%20know%20more%20about%20this%20topic%3F%20Join%20the%20Exchange%20engineering%20team%20and%20MVPs%20at%20%3CACRONYM%20title%3D%22Microsoft%20Exchange%20Conference%22%3EMEC%3C%2FACRONYM%3E2014%20for%20a%20chance%20to%20get%20your%20questions%20answered.%20Register%20today%20at%20%3CA%20title%3D%22Register%20for%20the%20Microsoft%20Exchange%20Conference%2C%20March%2031-Feb%202nd%202014%2C%20Austin%2C%20TX%22%20class%3D%22bold%22%20href%3D%22http%3A%2F%2Fiammec.com%2F%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%20target%3D%22_blank%22%3EIAMMEC.com%3C%2FA%3E.%3C%2FP%3E%20%20%3CP%3E%3CSPAN%20class%3D%22author%22%3EVandana%20Kumbla%3C%2FSPAN%3E%3CBR%20%2F%3ESenior%20Program%20Manager%3C%2FP%3E%3C%2FLINGO-BODY%3E

Message trace enables administrators to trace email messages as they pass through Exchange Online or Exchange Online Protection (EOP) service. It helps you determine whether a message was received, rejected, deferred, or delivered by the service.

You’ve told us that you need to be able to trace messages older than the current period of one week. We’re excited to announce that we’re increasing the look back period for message trace in Exchange Online to 90 days!

The existing functionality of looking up messages for the last week will persist and those results will be viewable immediately. When you search for messages older than a week, the request will be submitted as an extended message trace request. After the request has been processed, the trace results will be delivered to you in a CSV file by email. An example of an extended message trace request is shown below.

EO-ExtendingMessageTrace

We’re already rolling out this feature. Look for more details later this month.

This feature applies to Exchange Online and Exchange Online Protection services. On-premises customers have the capability to manage and search message tracking logs in Exchange Server.

Want to know more about this topic? Join the Exchange engineering team and MVPs at MEC 2014 for a chance to get your questions answered. Register today at IAMMEC.com.

Vandana Kumbla
Senior Program Manager

18 Comments
Not applicable
@abcd12356 1) The recipient_status column provides the status of the delivery of the message to the recipient. If the message was sent to multiple recipients, it will show all the recipients and the corresponding status against each, in the format: ##.

For example, ##Receive, Send means that the message was received by the service and sent to the intended destination. ##Receive, Fail means that the message was received by the service but failed to be delivered to the intended destination. ##Receive, Deliver

means that the message was received by the service and delivered to the recipient’s mailbox. 2) With regard to input criteria, you can provide the date and time range in which to search for message events. We do not offer search by message subject (is this

what you meant by title?) at this point.

Not applicable
Extending Message Trace to 90 days in Exchange Online
thank you
Not applicable

@John B: As mentioned in the post, on-premises customers can manage and search their own message tracking logs on their Exchange Server(s). By default, message tracking logs are retained for 30 days in Exchange 2013 and can be configured using

Set-TransportService cmdlet. See

Message Tracking and

Configure Message Tracking for details.

Not applicable
The inability to search by subject or content is a huge limitation for us. Any plans to implement this sorely lacking functionality?
Not applicable
Will this functionality be in SP1 for on prem?
Not applicable
@John B - What trace functionality are you looking for w/ on-prem? You can currently use OWA/ECP and/or powershell to search your tracking logs for on-prem. Once it leaves your org, the above is handy if you're already a EPO customer, but otherwise I don't

see how this would benefit on-prem?

Not applicable
Online users get the cool GUI interface while onprem users get the crummy powershell interface. Figures. Well, at least the option is there, but wow, the Exchange team onprem sucks.
Not applicable
Right that is my point. Message Trace is not available on prem. No issue running from powershell.
Not applicable
Finally, thank you!
Not applicable
Well at least, we are getting info in this Article "On-premises customers have the capability to manage and search message tracking logs in Exchange Server." Usually, NO info for Exchange On-Premises customers!!!
Not applicable
Exchange On-Premises customers can use ECP or Powershell and it works well.
Not applicable
@John B "Right that is my point. Message Trace is not available on prem. No issue running from powershell." http://technet.microsoft.com/en-us/library/bb124926(v=exchg.141).aspx What is missing?
Not applicable
I guess Microsoft will NEVER get it :) Enterprises do NOT want to move to the Public Cloud / Office 365, because Public Cloud is infested with Security Issues.
Not applicable
Just have to say that interface looks like crap in the picture above. Blinding white and grey with huge amount sod wasted space and zero help buttons. Can't tell if I can click on any of the words. It's an unmitigated disaster of an interface you've created.
Not applicable
In the CSV there are only these columns "origin_timestamp sender_address recipient_status message_subject total_bytes message_id network_message_id original_client_ip directionality connector_id delivery_priority". We are not sure if it's delivered from

the information.

Not applicable
Also we often use "title" or "time/time zone" to find results, we hope they are possible to use before click "search".
Not applicable
Can we please have the old Exchange Management Console back? It was 1000 times better than this web interface nonsense. It was also better for a lot of tasks over having to use PowerShell. Why is the Exchange team continually degrading the product functionality?
Not applicable
What are the required Management Role Entries to download/view CSV files on the portal? With a helpdesk account (with minimal rights) I'm able to create reports but I can't view them, I'm redirect to a page with Runtime Error.