Configure Protocol Logging in Exchange Server 2010

Get-ReceiveConnector 
Set-ReceiveConnector -Default Receive Connector -ProtocolLoggingLevel Verbose

Get-SendConnector 
Set-SendConnector -Default Send Connector -ProtocolLoggingLevel Verbose

[PS] C:\>Set-TransportServer NY-CAS-2K8 -ReceiveProtocolLogPath  "D:\Message-Log"
[PS] C:\>Set-TransportServer NY-CAS-2K8 -SendProtocolLogPath "D:\Message-Log"
[PS] C:\>Set-TransportServer NY-CAS-2K8 -ReceiveProtocolLogMaxFileSize 30MB
[PS] C:\>Set-TransportServer NY-CAS-2K8 -SendProtocolLogMaxFileSize 30MB
[PS] C:\>Set-TransportServer NY-CAS-2K8 -ReceiveProtocolLogMaxDirectorySize 400MB
[PS] C:\>Set-TransportServer NY-CAS-2K8 -SendProtocolLogMaxDirectorySize 400MB
[PS] C:\>Set-TransportServer NY-CAS-2K8 -ReceiveProtocolLogMaxAge 180.00:00:00
[PS] C:\>Set-TransportServer NY-CAS-2K8 -SendProtocolLogMaxAge 180.00:00:00

Protocol Logging logs all the SMTP conversation occurring between Exchange Server 2010 as part of message delivery. These conversations occur on Send or Receive Connectors that are configured on Exchange Server 2010 Hub Transport or the Edge Transport servers. These log files are helpful for administrators to troubleshoot mail flow problems. By default, protocol logging is disabled on all Send or Receive Connectors. Exchange Server 2010 uses Circular logging to restrict the log file size and file age to help control the hard disk space.

All the Receive Connectors configured on Hub Transport or Edge Transport share the same protocol log files and protocol log options. These log files and log options are different from the Send Connector configured on Hub Transport and the Edge Transport on the same servers.

Enable or disable protocol logging on connectors

You need to be assigned permissions before you can perform this procedure.

  How to configure Protocol Logging on Connectors from the EMC

1. Perform one of the following steps:
   • On an Edge Transport server, in the EMC, select Edge Transport and then click the Receive Connectors tab in the work pane.
   • On a Hub Transport server, expand Server Configuration and then select Hub Transport. In the result pane, select the server that has the Receive connector you want to modify and then open its Properties.
2. Click Properties under the name of the Receive Connector.
3. Click the General tab and use the drop-down box next to Protocol logging level to enable or disable protocol logging. None disables protocol logging, and Verbose enables protocol logging.
4. Click Ok to save the settings.

The above procedure is similar for Send connectors. To access Send connectors, you will have navigate to Organization Configuration > Hub Transport.

How to Use Shell to Enable or Disable Protocol Logging on Receive Connector

In the below example, we have enabled protocol logging level for the Receive connector "Connection from Techpeoples.net".

Get-ReceiveConnector

Set-ReceiveConnector -Connection from Techpeoples.net -ProtocolLoggingLevel Verbose

How to Use Shell to Enable or Disable Protocol Logging on Send Connector

In the below example, we have enabled protocol logging level for the Send connector "Connection from Techpeoples.net".

Get-SendConnector

Set-SendConnector -Connection from Techpeoples.net -ProtocolLoggingLevel Verbose

How to Configure the Location of the Protocol Log Files

The default location of Receive connector log files are at C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog\SmtpReceive, and the Send connector protocol log files location is C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog\SmtpSend.

How to change the location of Receive Connector log files:

Get- TransportServer

Set-TransportServer PC01 -ReceiveProtocolLogPath "C:\Receive SMTP Logs"

How to change the location of Send Connector log files:

Get-TransportServer

Set-TransportServer PC01 -SendProtocolLogPath "C:\Send SMTP Logs"

Log file location can also be changed from the Exchange Console.

How to Configure the Maximum Size of each Protocol Log File

The default size of each protocol log file is 10MB. All Receive connectors on the server share the same protocol log files and all Send connectors on the same server share the same protocol log files. When this limit is reached, a new protocol log file is created until the protocol log directory reaches its specified maximum size or a protocol log file reaches its specified maximum age. Circular logging deletes the oldest log file after the maximum size or maximum age limit is reached.

We cannot use the Exchange Console to change the maximum size of each protocol log file:

Below we have used to syntax to change the maximum file size of Send and Receive connector from the Shell:-

Set-TransportServer PC01 -ReceiveProtocolLogMaxFileSize 30MB

Set-TransportServer PC01 -SendProtocolLogMaxFileSize 30MB

How to Configure the Maximum Size of each Protocol Log Directory

The default size of each protocol log directory is 250MB. All Receive connectors on the server share the same protocol log files and all Send connectors on the same server share the same protocol log files. When this limit is reached, a new protocol log file is created until the protocol log directory reaches its specified maximum size or a protocol log file reaches its specified maximum age. Circular logging deletes the oldest log file after the maximum size or maximum age limit is reached.

We cannot use the Exchange Console to change the maximum size of each protocol log file:

Below we have used to syntax to change the maximum directory size of Send and Receive connector from the Shell:-

Set-TransportServer PC01 -ReceiveProtocolLogMaxDirectorySize 400MB

Set-TransportServer PC01 -SendProtocolLogMaxDirectorySize 400MB

How to Configure the Maximum Age of Protocol Log Files

The default age of each protocol log file is 30 days. All Receive connectors on the server share the same protocol log files and all Send connectors on the same server share the same protocol log files. When this limit is reached, a new protocol log file is created until the protocol log directory reaches its specified maximum size or a protocol log file reaches its specified maximum age. Circular logging deletes the oldest log file after the maximum size or maximum age limit is reached.

We cannot use the Exchange Console to change the maximum size of each protocol log file:

Below we have used to syntax to change the maximum directory size of Send and Receive connector from the Shell:-

Below we are configuring the age limit on Send and Receive connector to 60 days.

Set-TransportServer PC01 -ReceiveProtocolLogMaxAge 60.00:00:00

Set-TransportServer PC01 -SendProtocolLogMaxAge 60.00:00:00