Exchange 2007 - Message Tracking

Search by IP:

• get-messagetrackinglog -ResultSize unlimited -Start "9/3/2010 12:00:00 AM" -End "9/5/2010 11:59:00 PM" | where {$_.ClientIP -eq "xxx.xxx.xxx.xxx"} | fl ClientIP

Search by sender

• get-messagetrackinglog -Sender "email@domain.com" -EventID "SEND" -Server servername -Start "2011/08/01 12:00:00 AM" -End "2011/10/13 12:00:00 AM" -ResultSize Unlimited | where {[string]$_.recipients -like "*@*"} |select Sender,@{Name="Recipients";Expression={$_.recipients}},MessageSubject,MessageId,Timestamp,ConnectorId | export-csv C:\filename.csv