How to View the Application Log in Event Viewer

  • Article

 

In Event Viewer, both the application log and the system log contain errors, warnings, and informational events that are related to the operation of Exchange Server, the SMTP service, and other applications. To identify the cause of message flow issues, carefully review the data that is contained in the application log and system log.

Use the following procedure to view errors, warnings, and informational events in the application log.

Before You Begin

Before you perform the procedure in this topic, read Troubleshooting Mail Flow and SMTP.

The following permissions are required to perform this procedure:

  • Member of the local administrators group

Procedure

To view the application log in Event Viewer

  1. Click Start, point to Programs, point to Administrative Tools, and then click Event Viewer.

  2. In the console tree, click Application Log.

  3. To sort the log alphabetically and quickly locate an entry for an Exchange service, in the details pane, click Source.

  4. Double-click a log entry to open an event's properties page.

  5. To filter the log to list entries for a specific type of Exchange-related event, from the View menu, click Filter.

  6. In Application Log Properties, use the Event source list to select an Exchange-related event source. For example:

    • MSExchangeTransport   Events that are recorded when SMTP is used to route messages.

    • IMAP4Svc   Events that are related to the service that allows users to access mailboxes and public folders through IMAP4.

    • MSExchangeAL   Events that are related to the service that addresses e-mail messages through address lists.

    • MSExchangeIS   Events that are related to the service that allows access to the Exchange Information Store service.

    • MSExchangeMTA   Events that are related to the service that allows X.400 connectors to use the message transfer agent (MTA).

    • MSExchangeMU   Events that are related to the metabase update service, a component that reads information from Active Directory and transposes it to the local IIS metabase.

    • MSExchangeSA   Events that are recorded when Exchange uses Active Directory to store and share directory information.

    • MSExchangeSRS   Events that are recorded when Site Replication Service (SRS) is used to replicate computers running Exchange 2003 with computers running Exchange 5.5.

    • POP3Svc   Events that are recorded whenever Post Office Protocol version 3 (POP3) is used to access e-mail.

  7. In the Category list, select a specific set of events or, to view all events for that event source, leave the default setting at All.

  8. Click OK.