Exchange Server Cookbook

8.23. Using Protocol Logging

Problem

You need to log the specific protocol transactions of HTTP, NNTP, or SMTP sessions.

Solution

Using a graphical user interface

1. Open the property sheet of the desired virtual server:

   • If you need to enable logging on an HTTP virtual server, launch the IIS management snap-in and open the property sheet of the Default Web Site to the General tab.

   • If you need to enable logging on an NNTP virtual server, launch Exchange System Manager, navigate to the desired server object, expand Protocols, expand NNTP, and open the property sheet of the desired virtual server to the General tab.

   • If you need to enable logging on an SMTP virtual server, launch Exchange System Manager, navigate to the desired server object, expand Protocols, expand SMTP, and open the property sheet of the desired virtual server to the General tab.

2. Select Enable Logging and select W3C Extended Log File Format.

3. Click Properties and select the General tab.

4. Select your desired log schedule: hourly, daily, weekly, monthly, unlimited file size, or specified file size.

5. If you will be comparing entries in this log with logs from other systems such as Unix servers or servers in other time zones, clear the Use local time for file naming and rollover checkbox to instruct Exchange to use UTC timing.

6. Ensure that the log file path shown in the Log file directory field is satisfactory.

7. Click the Advanced tab, select the specific fields to be logged, and then click OK twice to close the virtual server property ...