Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-10-30

Microsoft Exchange Server 2010 and Exchange ActiveSync offer many different features for both users and administrators. As an administrator, it's important that you know the volume and usage patterns of your deployment. This information can help you effectively manage your Exchange ActiveSync deployment, better understand user productivity, and plan for future needs. Reporting in Exchange ActiveSync for Exchange 2010 is a Windows PowerShell task that compiles a set of Internet Information Services (IIS) logs and processes to create a series of output files. Each file is a separate report that can help you understand your Exchange ActiveSync deployment. This topic provides an overview of the cmdlet you can use to generate these reports, and information about the content of these reports.

Contents

Generating Exchange ActiveSync Reports

Available Exchange ActiveSync Reports

Interpreting the Internet Information Services Log Files

Generating Exchange ActiveSync Reports

You can generate Exchange ActiveSync reports using the Export-ActiveSyncLog cmdlet. This cmdlet lets you specify many input parameters. These parameters include the location of the IIS log files, the start dates and the end dates for the reports, and the output path for the reports. To run this cmdlet, you must be delegated the permissions associated with the Exchange Server Administrator or Exchange Organization Administrator role. You must also have read access to the directory where the IIS logs are located. For more information about the syntax of the Export-ActiveSyncLog cmdlet, see Export-ActiveSyncLog.

Available Exchange ActiveSync Reports

The different Exchange ActiveSync reports available include the following:

  • Exchange ActiveSync Usage Report   This report includes several monitored parameters. These include the total bytes that were sent and received in addition to a count of each type of item sent and received. Item types are e-mail messages, calendar items, contact items, and task items.

  • Hits Report   This report lets you see the total number of synchronization requests processed per hour, in addition to the total number of unique devices that are initiating synchronization requests.

  • HTTP Status Report   This report provides a general overview of the performance of the Client Access server. It includes a summary of the different error response codes and the percentage of the time each code was encountered.

  • Policy Compliance Report   This report provides information about the number of fully compliant, partially compliant, and noncompliant devices. A fully compliant device is one that has accepted the Exchange ActiveSync policy and can implement all aspects of the policy. A partially compliant device is one that has accepted the policy, but has a mobile device operating system that's unable to enforce all aspects of the policy. A noncompliant device is either unable to accept the policy or has rejected the policy.

  • User Agent List   This report returns the total number of unique users, organized by mobile phone operating system.

Interpreting the Internet Information Services Log Files

The following table lists the different elements of the Exchange ActiveSync IIS logs. In the log file, each element is separated by an underscore character.

Elements of the Exchange ActiveSync protocol logs

Letter identifier Element name Definition Possible values

V

Protocol version

The protocol version the device is using to synchronize with the Exchange server.

Value Meaning

120

Version 12

25

Version 2.5

21

Version 2.1

20

Version 2.0

10

Version 1.0

Ty

Type

The type of folder that's being synchronized.

Value Meaning

Em

E-mail

Co

Contacts

Ca

Calendar

Ta

Tasks

Fid

Folder ID

The ID of the folder that's being synchronized.

Positive Integer

Fc

Folder count

The number of folders that are being synchronized.

Positive Integer

Filt

Filter type

The data that the user requested.

Value Meaning E-mail? Calendar? Tasks?

0

No filter

Yes

Yes

Yes

1

1 day back

Yes

No

No

2

3 days back

Yes

No

No

3

1 week back

Yes

No

No

4

2 weeks back

Yes

Yes

No

5

1 month back

Yes

Yes

No

6

3 months back

No

Yes

No

7

6 months back

No

Yes

No

8

Incomplete

No

No

Yes

St

Sync type

The type of synchronization that's being performed.

Value Meaning

F

First sync

S

Subsequent sync

R

Recovery sync

I

Invalid sync

Sk

Sync key

The actual sync key that's used between the mobile phone and the Exchange server.

Positive integer

Cli:

Client statistics

Stores the count of each type of activity from the Client. Output is in the form Cli: 0A0C3D1F0E.

Identifier value Meaning

A

Adds

C

Changes

D

Deletes

F

Fetches

E

Errors

Srv:

Server statistics

Stores the count of each type of activity from the server. Output is in the form Srv:2A0C2D1F1E.

Identifier value Meaning

A

Adds

C

Changes

D

Deletes

F

Fetches

E

Errors

E

Number of errors

The number of errors encountered in a request.

Positive integer

Io

Items opened

The number of items that were opened. This feature hasn't yet been implemented.

Positive integer

Hb

Heartbeat interval

The Heartbeat interval that's used for the PING command.

Positive integer

Ssp

SharePoint documents

The number of files that were accessed from Windows SharePoint Services.

Positive integer

Sspb

SharePoint bytes

The number of bytes that were accessed from Windows SharePoint Services.

Positive integer

Unc

UNC files

The number of files that were accessed through Windows file shares.

Positive integer

Uncb

UNC bytes

The number of bytes that were accessed through Windows file shares.

Positive integer

Att

Attachments

The number of attachments that were retrieved.

Positive integer

Attb

Attachment bytes

The number of bytes that were retrieved for attachments.

Positive integer

Pk

Policy key received

The element that's used by the client and server to correlate acknowledgements to a particular policy setting.

Not applicable

Pa

Policy acknowledge status

The element that indicates success if all the policy settings were applied correctly.

Value Meaning

1

Policy was successfully applied

2

Policy was partially applied

3

Policy was not applied

Oof

OOf action

The action that is performed on the Out of Office status stored on the Exchange server.

Value Meaning

Get

Retrieves the OOF status and message

Set

Sets the OOF status and message

UserInfo

User information action

The parameter that specifies retrieval of the user information data.

Get

DevModel

Device model

The device information that is supplied by the device manufacturer.

Possible values include manufacturer name, model name, and model number.

DevIMEI

IMEI

The International Mobile Equipment Identity (IMEI). It is a 15-digit code that's assigned to each device.

String

DevName

Device friendly name

This element stores the user's description of their device.

String

DevOS

Device OS

The operating system that is running on the device.

String

DevLang

Device OS language

The localized language of the device operating system.

String

Error

Error

The error section of the request.

String

S

Status

This element returns the status of the device.

String

R

Not Relevant

This element returns a count of items that have changed but aren't relevant to the mobile phone or device.

Positive integer

The following is a sample log for mobile device synchronization:

&Log=V123_Ty:Em_Fid:37_Fc1_Filt2_St:S_SK:1805_Srv:1a0c0d0s0e0r_Pk2260121383_S1