Export (0) Print
Expand All

Manage Journaling

Exchange Online
 

Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2013-11-20

Journaling can help your organization respond to legal, regulatory, and organizational compliance requirements by recording inbound and outbound e-mail communications. This topic shows you how to perform basic tasks related to managing journaling in Exchange 2013.

Standard journaling is configured on a mailbox database. It enables the Journaling agent to journal all messages sent to and from mailboxes located on a specific mailbox database. You can also use premium journaling enables the Journaling agent to perform more granular journaling by using journal rules. Instead of journaling all mailboxes residing on a mailbox database, you can configure journal rules to match your organization's needs by journaling individual recipients or members of distribution groups. You must have an Exchange Enterprise client access license (CAL) to use premium journaling.

To learn more about journaling, see Journaling.

  • Estimated time to complete each procedure: 5 minutes.
  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Journaling" entry in the Messaging Policy and Compliance Permissions topic.
  • A journaling mailbox has been created, or an existing mailbox is available for use as the journaling mailbox.
  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.
tipTip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection If you’re having trouble with the JournalingReportDNRTo mailbox, see Transport and Mailbox Rules in Exchange Online don’t work as expected.

  1. Navigate to Compliance management > Journal rules, and then click Add Add Icon.
  2. In Journal rule, provide a name for the journal rule and then compete the following fields:
    • If the message is sent to or received from   Specify the recipient that the rule will target. You can either select a specific recipient or apply the rule to all messages.
    • Journal the following messages   Specify the scope of the journal rule. You can journal only the internal messages, only the external messages, or all messages regardless of origin or destination.
    • Send journal reports to   Type the address of the journaling mailbox that will receive all the journal reports.
  3. Click Save to create the journal rule.

This example creates the journal rule Discovery Journal Recipients to journal all messages sent from and received by the recipient user1@contoso.com.

New-JournalRule -Name "Discovery Journal Recipients" -Recipient user1@contoso.com -JournalEmailAddress "Journal Mailbox" -Scope Global -Enabled $True

To verify that you have successfully created the journal rule, do one of the following:

  • From the EAC, verify that the new journal rule you created is listed on the Journal rules tab.
  • From the Shell, verify that the new journal rule exists by running the following command (the example below verifies the rule created in the Shell example above):
    Get-JournalRule "Discovery Journal Recipients"
    

  1. Navigate to Compliance management > Journal rules.
  2. In the list view, you’ll see all the journal rules in your organization.
  3. Double-click the rule you want to view or modify.
  4. In Journal Rule, modify the settings you want. For more information about the settings in this dialog box, see the procedure Use the EAC to create a journal rule earlier in this topic.

This example displays a summary list of all journal rules in the Exchange organization:

Get-JournalRule

This example retrieves the journal rule Brokerage Journal Rule, and pipes the output to the Format-List command to display rule properties in a list format:

Get-JournalRule "Brokerage Journal Rule" | Format-List

If you want to modify the properties of a specific rule, you need to use the Set-JournalRule cmdlet. This example changes the name of the journal rule JR-Sales to TraderVault. The following rule settings are also changed:

  • Recipient
  • JournalEmailAddress
  • Scope
Set-JournalRule JR-Sales -Name TraderVault -Recipient traders@woodgrovebank.com -JournalEmailAddress tradervault@woodgrovebank.com -Scope Internal

To verify that you have successfully modified a journal rule, do one of the following:

  • From the EAC, navigate to Compliance management, > Journal rules. Double-click the rule you modified and verify your changes were saved.
  • From the Shell, verify that you modified the journal rule successfully by running the following command. This command will list the properties you modified along with the name of the rule (the example below verifies the rule modified in the Shell example above):
    Get-TransportRule "TraderVault" | Format-List Name,Recipient,JournalEmailAddress,Scope
    

importantImportant:
When you disable a journal rule, the journaling agent will stop journaling messages targeted by that rule. While a journal rule is disabled, any messages that would have normally been journaled by the rule aren’t journaled. Make sure that you don't compromise the regulatory or compliance requirements of your organization by disabling a journaling rule.

  1. Navigate to Compliance management > Journal rules.
  2. In the list view, in the On column next to the rule’s name, select the check box to enable the rule or clear it to disable the rule.

This example enables the rule Contoso.

Enable-JournalRule "Contoso Journal Rule"

This example disables the rule Contoso.

Disable-JournalRule "Contoso Journal Rule"

To verify that you have successfully enabled or disabled a journal rule, do one of the following:

  • From the EAC, view the list of journal rules check the status of the check box in the On column.
  • From the Shell, run the following command to return a list of all journal rules in your organization along, including their status:
    Get-JournalRule | Format-Table Name,Enabled
    

  1. Navigate to Compliance management > Journal rules.
  2. In the list view, select the rule you want to remove, and then click Delete Delete Icon.

This example removes the rule Brokerage Journal Rule.

Remove-JournalRule "Brokerage Journal Rule"

To verify that you have successfully removed the journal rule, do one of the following:

  • From the EAC, verify that the rule you removed is no longer listed on the Journal rules tab.
  • From the Shell, run the following command to verify that the rule you remove is no longer listed:
    Get-JournalRule
    

CautionCaution:
Disabling message journaling on a mailbox database may result in your organization being out of compliance with any applicable messaging retention policies. When you disable message journaling on a mailbox database, journal receipts are no longer sent for messages sent or received by mailboxes on that mailbox database.

  1. Navigate to Servers > Databases.
  2. In the list view, double-click the mailbox database for which you want to enable journaling.
  3. Click Maintenance, and then click Browse next to the Journal recipient box to select the journaling mailbox. Specifying a journal recipient enables journaling for the database.
    To disable journaling, remove the journal recipient by clicking Remove X.

This example enables journaling for the mailbox database Sales Database and sets Sales Database journal mailbox as the journal recipient.

Set-MailboxDatabase "Sales Database" -JournalRecipient "Sales Database Journal Mailbox"

This example disables per-mailbox database journaling on the Sales Database mailbox database.

Set-MailboxDatabase "Sales Database" -JournalRecipient $Null

This example disables per-mailbox database journaling on all mailbox databases in the Exchange organization. The Get-MailboxDatabase cmdlet is used to retrieve all mailbox databases in the Exchange organization, and results from the cmdlet are piped to the Set-MailboxDatabase cmdlet.

Get-MailboxDatabase | Set-MailboxDatabase -JournalRecipient $Null

To verify that you have successfully enabled or disabled per-mailbox database journaling, do one of the following:

  1. From the EAC, navigate to Servers > Databases.
  2. Double click the database you want to verify, and then select the Maintenance tab.
  3. If the correct journaling recipient is listed in the Journal recipient box, you have successfully enabled journaling for the mailbox database. If there is no journaling recipient listed, journaling is disabled for the database.
  • From the Shell, run the following command to return a list of all mailbox databases in your organization, including the journal recipients associated with them. Journaling is enabled for databases that have a journal recipient listed, otherwise it’s disabled.
    Get-MailboxDatabase | Format-Table Name,JournalRecipient
    
 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft