Export (0) Print
Expand All

Run a Message Trace


Applies to: Office 365 Enterprise, Live@edu, Forefront Online Protection for Exchange

Topic Last Modified: 2013-03-08

Microsoft Office 365 customers may want to consult the following Wiki topic which includes information about how you can use the Message Trace tool to troubleshoot mail flow problems in Office 365: Troubleshooting mail flow in Office 365.

In the Forefront Online Protection for Exchange (FOPE) Administration Center, the Message Trace feature enables you to search for a specific message using basic information, such as the sender, recipient, date, and message ID, to obtain the status of that message. Email status information helps you see if and when a message was received by the FOPE filtering service; whether it was scanned, blocked, or deleted; or whether it was delivered successfully within the last month.

To begin searching for specific messages in the Administration Center, use the Message Trace tab on the Tools tab to define your search criteria.

How to run a message trace
  1. On the Tools tab, click the Message Trace tab.

  2. On the Message Trace pane, under Search Parameters, enter the sender and recipient address information.

    Both sender and recipient email addresses are required when you perform a message trace, and at least one of the search boxes must contain a complete email address, such as recipient@contoso.com. If you want to broaden your search, you may add either a full email address or just a domain name, such as @nwtraders.com, in the other search box.
  3. In the Start date and End date boxes, select a date range for your message trace. The default date range is set to 48 hours prior to the current date and time. The maximum date range for a single search is 30 days.

  4. In the Time zone list, click the time zone that should be used when processing your message trace.

  5. In the Message ID box, type the message ID of the message that you want to trace. The message ID is a unique ID that is generated by a sending email server. This information is optional when you run a message trace.

  6. Click Search. A Results pane appears below the Message Trace pane, displaying the message count and a list of messages that match the search criteria that you entered in the Message Trace pane.

  7. To have fewer messages returned from the search, click Refine Search and redefine the search criteria.

  8. To view more detailed information about a specific email message, click Details. A new browser window will open showing the Message Trace Summary for that message.

    The following information is displayed in the Message Trace Summary window:

    • Sender: The email address of the sender.

    • Recipient: The email address of the recipient

    • MessageID: MessageID@phxgbl

    • Message Size: Size of the email message

    • Date and Time received: dd/mm/yyyy hh:mm:ss AM/PM

    • Date and Time filtered: dd/mm/yyyy hh:mm:ss AM/PM

    • First Delivery attempt: dd/mm/yyyy hh:mm:ss AM/PM

    • Final Delivery attempt: dd/mm/yyyy hh:mm:ss AM/PM

    • From IP address: The IP address of the senders email server

    • To IP address: The IP address of the recipients mail server

    • Filtering results: Passed Filtering or marked for Quarantine.

    • Delivery result: Delivered and queued for mail delivery or delivered to Policy Quarantine

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2014 Microsoft