Use Event Viewer

Once you have enabled logging, you can view the log entries in Event Viewer. Event Viewer is a Windows 2000 component that you can use to monitor hardware and software activities. Within each Event Viewer log, Exchange records informational, warning, and error events. For each type of log, you can specify the maximum size, how long to save entries, and whether to automatically overwrite existing events when the log is full or manually clear entries.

Monitor these logs closely to keep track of the kinds of transactions being conducted on your Exchange servers. Periodically archive the logs to avoid running out of space. Because log files can occupy only a finite amount of space, clear the logs occasionally so that Exchange can continue to write new events. For more information about using Performance monitor, see the Windows 2000 Server documentation.

To use Windows 2000 Event Viewer:

1. Start Event Viewer
   On the Start menu, point to Programs, point to Administrative Tools, and then click Event Viewer.
2. Navigate to Application Log.

   Event Viewer

   1. Application Log
3. To sort the log alphabetically and quickly locate an entry for an Exchange service, click Source.
4. To open a service's Property page and retrieve detailed information, double-click the log entry.
5. To filter the log to list entries for a specific counter, from the View menu, choose Filter. In Event Source, choose one of the following Exchange messaging and collaboration service counters:
   • IMAP4Svc.  This service allows users to access mailboxes and public folders through Internet Message Protocol version 4 (IMAP4).
   • MSExchangeAL.  This service allows e-mail to be addressed through Address Lists.
   • MSExchangeIS.   This service allows access to Information Store.
   • MSExchangeMTA.  This service allows X.400 connectors to see MTA is used.
   • MSExchangeSA.  This counter records an entry when Exchange uses Windows 2000 Active Directory to store and share directory information.
   • MSExchangeSRS.  This counter records an entry whenever Site Replication Service are used to replicate computers running Exchange 2000 Server with computers running Exchange 5.5.
   • MSExchangeTransport.  This counter records an entry whenever Simple Mail Transfer Protocol (SMTP) is used to route messages.
   • POP3Svc.  This counter records an entry whenever Post Office Protocol version 3 (POP3) is used to access e-mail.