May 24 2018 11:14 AM
May 24 2018 11:14 AM
I tried using the new Message Trace in the Office 365 admin portal and I still haven't received my report 1 hour after creating my search. Previously the message trace was instantaneous, I would see the results of my search immediately after clicking 'search'.
Now with the new Message Trace, I am informed that I will receive an email when my report is ready. I waited over an hour and I have not received any email. I use message traces often to troubleshoot email issues and it is an important feature for me. Having a long delay before viewing the results is quite inconvenient.
Is this behavior normal?
May 28 2018 11:10 AMSolution
Requesting the downloadable report has always required some time. If you want the "synchronous" results that get displayed immediately, make sure to use the Summary report option, not Enhanced summary report or Extended report. And also make sure to limit the date range to maximum 10 days past.
May 28 2018 01:39 PM
It is also possible to get message trace results promptly when done using PowerShell against Office 365.
We resort to this method to find out the required traces just in summary and not the detailed report of everything available.
This is just an alternate if you are comfortable using PowerShell with O365.
May 28 2018 01:54 PM
This should help you get started with the powershell access to message tracing from O365
Jan 28 2019 04:24 PM
Hello, Is it possible to run (2) simultaneous message traces by subject from powershell?
Is it possible to do a message trace by subject for more than one word?
Jan 28 2019 11:39 PM
Subject-based searches are not possible. The only way to make this work is to fetch all events, then filter them client-side.
Jan 29 2019 08:49 AM
Hello, I had (2) questions. Are you saying that the answer to both of my questions is no?
No, it is not possible to run (2) different power shell sessions searching by subject?
and No, it is not possible to run a message trace by subject using more than one word as the search criteria? The idea is to run a message trace by subject with includes the entire subject line of an email.
Jan 29 2019 11:09 AM
There is no way to run a search based on subject, period. Doesn't matter if it's a single session, a single word, a phrase - it's simply not possible. The only way would be to run a "full" message trace, get all the events for the period in question, then filter them in PowerShell or Excel or whatever.
Jan 29 2019 11:19 AM
I disagree. There is a way to do a message trace by subject, but it is only possible using one word.
Here is just one example.
Jan 29 2019 11:48 AM
This is exactly the method I'm referring to above. Where/Where-Object is a client-side operation, meaning that you need to fetch all the message trace events first before you can apply the filter. At which point you might as well just export them to CSV and filter/search via Excel.