Understanding Exchange ActiveSync Reporting Services

[This topic is in progress.]

Applies to: Exchange Server 2010

Microsoft Exchange Server 2010 and Exchange ActiveSync offer many different features for both users and administrators. As an administrator, it's important that you know the volume and usage patterns of your deployment. This information can help you effectively manage your Exchange ActiveSync deployment, better understand user productivity, and plan for future needs. Reporting in Exchange ActiveSync for Exchange 2010 is a Windows PowerShell task that compiles a set of Internet Information Services (IIS) logs and processes to create a series of output files. Each file is a separate report that can help you understand your Exchange ActiveSync deployment. This topic provides an overview of the cmdlet you can use to generate these reports and information about the content of these reports.

Generating Exchange ActiveSync Reports

You can generate Exchange ActiveSync reports using the Export-ActiveSyncLog cmdlet. This cmdlet lets you specify many input parameters. These parameters include the location of the IIS log files, the start dates and the end dates for the reports, and the output path for the reports. To run this cmdlet, you must be delegated the permissions associated with the Exchange Server Administrator or Exchange Organization Administrator role. You must also have read access to the directory where the IIS logs are located. For more information about the syntax of the Export-ActiveSyncLog cmdlet, see Export-ActiveSyncLog.

Available Exchange ActiveSync Reports

The different Exchange ActiveSync reports available include the following:

  • Exchange ActiveSync Usage Report   This report includes several monitored parameters. These include the total bytes that were sent and received in addition to a count of each type of item sent and received. Item types are e-mail messages, calendar items, contact items, and task items.
  • Hits Report   This report lets you see the total number of synchronization requests processed per hour, in addition to the total number of unique devices that are initiating synchronization requests.
  • HTTP Status Report   This report provides a general overview of the performance of the Client Access server. It includes a summary of the different error response codes and the percentage of the time each code was encountered.
  • Policy Compliance Report   This report provides information about the number of fully compliant, partially compliant, and noncompliant devices. A fully compliant device is one that has accepted the Exchange ActiveSync policy and can implement all aspects of the policy. A partially compliant device is one that has accepted the policy, but has a mobile device operating system that's unable to enforce all aspects of the policy. A noncompliant device is either unable to accept the policy or has rejected the policy.
  • User Agent List   This report returns the total number of unique users, organized by mobile phone operating system.

Interpreting the Internet Information Services Log Files

The following table lists the different elements of the Exchange ActiveSync IIS logs. In the log file, each element is separated by an underscore character.

Elements of the Exchange ActiveSync protocol logs

Letter identifier Element name Definition Possible values

V

Protocol version

The protocol version the device is using to synchronize with the Exchange server.

Value Meaning
120 Version 12
25 Version 2.5
21 Version 2.1
20 Version 2.0
10 Version 1.0

Ty

Type

The type of folder that's being synchronized.

Value Meaning
Em E-mail
Co Contacts
Ca Calendar
Ta Tasks

Fid

Folder ID

The ID of the folder that's being synchronized.

Positive Integer

Fc

Folder count

The number of folders that are being synchronized.

Positive Integer

Filt

Filter type

The data that the user requested.

Value Meaning E-mail? Calendar? Tasks?
0 No filter Yes Yes Yes
1 1 day back Yes No No
2 3 days back Yes No No
3 1 week back Yes No No
4 2 weeks back Yes Yes No
5 1 month back Yes Yes No
6 3 months back No Yes No
7 6 months back No Yes No
8 Incomplete No No Yes

St

Sync type

The type of synchronization that's being performed.

Value Meaning
F First sync
S Subsequent sync
R Recovery sync
I Invalid sync

Sk

Sync key

The actual sync key that's used between the mobile phone and the Exchange server.

Positive integer

Cli:

Client statistics

Stores the count of each type of activity from the Client. Output is in the form Cli: 0A0C3D1F0E.

Identifier value Meaning
A Adds
C Changes
D Deletes
F Fetches
E Errors

Svr:

Server statistics

Stores the count of each type of activity from the server. Output is in the form Svr:2A0C2D1F1E.

Identifier value Meaning
A Adds
C Changes
D Deletes
F Fetches
E Errors

E

Number of errors

The number of errors encountered in a request.

Positive integer

Io

Items opened

The number of items that were opened. This feature hasn't yet been implemented.

Positive integer

Hb

Heartbeat interval

The Heartbeat interval that's used for the PING command.

Positive integer

Ssp

SharePoint documents

The number of files that were accessed from Windows SharePoint Services.

Positive integer

Sspb

SharePoint bytes

The number of bytes that were accessed from Windows SharePoint Services.

Positive integer

Unc

UNC files

The number of files that were accessed through Windows file shares.

Positive integer

Uncb

UNC bytes

The number of bytes that were accessed through Windows file shares.

Positive integer

Att

Attachments

The number of attachments that were retrieved.

Positive integer

Attb

Attachment bytes

The number of bytes that were retrieved for attachments.

Positive integer

Pk

Policy key received

The element that's used by the client and server to correlate acknowledgements to a particular policy setting.

Not applicable

Pa

Policy acknowledge status

The element that indicates success if all the policy settings were applied correctly.

Value Meaning
1 Policy was successfully applied
2 Policy was partially applied
3 Policy was not applied

Oof

OOf action

The action that is performed on the Out of Office status stored on the Exchange server.

Value Meaning
Get Retrieves the OOF status and message
Set Sets the OOF status and message

UserInfo

User information action

The parameter that specifies retrieval of the user information data.

Get

DevModel

Device model

The device information that is supplied by the device manufacturer.

Possible values include manufacturer name, model name, and model number.

DevIMEI

IMEI

The International Mobile Equipment Identity (IMEI). It is a 15-digit code that's assigned to each device.

String

DevName

Device friendly name

This element stores the user's description of their device.

String

DevOS

Device OS

The operating system that is running on the device.

String

DevLang

Device OS language

The localized language of the device operating system.

String

Error

Error

The error section of the request.

String

S

Status

This element returns the status of the device.

String

A sample log for a device synchronization might appear as follows:

  • &Log=V123_Ty:Em_Fid:37_Fc1_Filt2_St:S_SK:1805_Srv:1a0c0d0s0e0r_Pk2260121383_S1

For More Information

For more information about reporting for Exchange ActiveSync, see the following topics: