Manually Review Message Logs
If a user reports that a message was sent but never received, you can track the message by finding its history in message tracking logs. You can use the sender's e-mail address and server name to find the information using Message Tracking Center; however, if you cannot find a message in the search results, you can manually review the message tracking logs. By default, message tracking logs are stored in Exchsrvr\servername.log, in which servername is the name of your Exchange server. To modify this location, right-click the server you want, click Properties, and then make your changes on the General tab . Each day, Exchange creates a new log that records the messages a server processes. Each daily log is named for the date on which it was created, with a format of yyyymmdd.log.
Important By default, only administrators with read access to the computer, where the log files are located, can view them. If you want to share access to the log files with remote users, you must grant the required permissions manually.
To review message tracking logs:
Tip The log file has a .log extension, so you must browse for all file types. You can also import the log file into spreadsheets such as Microsoft Excel, or you can use it in custom applications.
Related TopicsUse the Message Tracking Center Understanding Message Tracking Logs