The two most important Windows 2000 Server event types are System and Security. Within each Event Viewer log, SMTP records informational, warning, and error events.
Logging predetermined events begins automatically, whenever Exchange 2000 is started. For each type of log, you can designate the maximum size, how long to save entries, and whether to automatically overwrite existing events when the log is full, or manually clear entries.
Monitor these logs closely to keep track of the kinds of transactions being conducted on your SMTP virtual servers. You will also know who is using your virtual server, at what times, and for what purposes. Periodically archive the logs to avoid running out of space. Since log files can only occupy a finite amount of space, clear the logs occasionally so that Exchange can continue to write new events.
To set up event logs:
Note Under the Source column, SMTP displays as SMTPSVC.
Through Exchange, you can assign specific logging levels, which are intended to further organize the information collected in Event Viewer. Logging levels are intended to help you tailor logging information to suit your needs. Logging levels are not implemented by default.
To implement logging levels: