Applies to: Exchange Server 2013

Topic Last Modified: 2013-02-14

Filtering generates different views of the messages in queues. By specifying filter criteria, you can quickly locate messages and take action on them. When an email message is sent to multiple recipients, the message may be located in multiple queues. When you filter by message properties, you can locate messages across all queues. The following scenarios are examples of how you might use message filtering to manage mail flow:

Message properties as filters

You can use message properties to create a filter and locate messages that meet specified criteria. You can create filters in Queue Viewer, or by using the Filter parameter on the message management cmdlets. Note that the message management cmdlets support more filterable properties than the Queue Viewer. The following table lists the message properties by which you can filter and the values that are associated with those properties.

Message properties to use when filtering messages

Queue Viewer message property Shell message property Description

Date Received


The date/time when the message was placed in the queue.



This property identifies why the message was deferred. If the message wasn't deferred, this property has the value None. A deferred message is returned to the Submission queue because of transient errors that were encountered during recipient resolution. For more information about deferred messages, see Recipient Resolution. The possible values are:

AD Transient Failure During Content Conversion

AD Transient Failure During Resolve


Ambiguous Recipient

Loop Detected

Marked As Retry Delivery If Rejected

Rerouted By Store Driver

Storage Transient Failure During Content Conversion

Transient Failure

Target Site Inbound Mail Disabled

Recipient Thread Limit Exceeded

Transient Attribution Failure

Transient Accepted Domains Load Failure

Expiration Time


This property contains the date/time when the message will expire and be deleted from the queue if the message can't be delivered.

From Address


This property contains the SMTP address of the sender.



This property is the identity of the message in the form of <Server>\<Queue>\<MessageInteger>. For more information see the "Message identity" section in the Queues topic.

Internet Message ID


This property contains the value of the Message-ID: header field that's located in the message header. The value is expressed as an email address that contains a GUID and the FQDN the sending SMTP server. For example:


Last Error


This property contains the text of the last error that was recorded for a message. For example, A matching connector cannot be found to route the external recipient.



This property contains the amount of time elapsed between when the message first entered the Submission queue on the server, and when the message was placed in the queue. The value uses the syntax hh:mm:ss.ff, where hh = hour, mm = minute, ss = second, and ff = fractions of a second.

Message Source Name


This property contains a text string that indicates the name of the transport component that submitted the message to the queue. For example, if the message came in through a Receive connector, the value is: SMTP:<ConnectorName>. If the message is a delivery status notification (DSN), the value is DSN.



This property contains the priority of the message that's assigned by the user in Outlook or Outlook Web App. The possible values are Low, Normal, and High. For more information, see Priority Queuing.

Queue ID


This property is the identity of the queue that holds the message. The queue identity uses the syntax <Server>\<Queue>. For more information, see the "Queue identity" section in the Queues topic.



This property identifies the number of times that delivery of the message to the destination was tried, either automatically or manually.



The value of the spam confidence level (SCL) property specifies the SCL of the message. Valid SCL entries are integers from 0 through 9. An empty SCL property value indicates that the message hasn't been processed by the Content Filter agent.

This property contains the spam confidence level (SCL) value of the message. Valid SCL entries are integers from 0 through 9 and -1. For more information, see Spam Confidence Level Threshold.

Size (KB)


This property indicates the size of the message.

Source IP


This property contains the IP address of the server that submitted the message to the Exchange server that holds the message in the queue. The address could be the IP address of a remote SMTP server, or the IP address of the local Exchange server.



This property indicates the current message status. A message can have one of the following status values:




Pending Remove

Pending Suspend




For more information, see the "Message properties" section in the Queues topic.



This property indicates the subject of a message that's found in the Subject: header field in the message header.