You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You can use this cmdlet to search message data for the last 90 days. You can only query 10 days worth of data per query. If you enter a timeframe that's older than 90 days, you receive an error and the command will return no results.
31
+
32
+
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://learn.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
This example retrieves detailed message trace information for messages with the message trace ID value ae5c1219-4c90-41bf-fef5-08d837917e7c that were received by `[email protected]`.
This example uses the Get-MessageTrace cmdlet to retrieve message trace information for messages with the Exchange Network Message ID value 2bbad36aa4674c7ba82f4b307fff549f sent by `[email protected]` between May 13, 2025 and May 15, 2025, and pipelines the results to the Get-MessageTraceDetail cmdlet.
48
+
This example uses the Get-MessageTrace cmdlet to retrieve message trace information for messages with the Exchange Network Message ID value 2bbad36aa4674c7ba82f4b307fff549f sent by `[email protected]` between June 13, 2025 and June 15, 2025, and pipelines the results to the Get-MessageTraceDetailV2 cmdlet.
47
49
48
50
## PARAMETERS
49
51
@@ -62,7 +64,7 @@ The MessageTraceId value is also available in the output of the following cmdlet
You can use this cmdlet to search message data for the last 10 days. If you run this cmdlet without any parameters, only data from the last 48 hours is returned.
42
+
You can use this cmdlet to search message data for the last 90 days. If you run this cmdlet without any parameters, only data from the last 48 hours is returned. You can only return 10 days worth of data per query.
43
43
44
-
If you enter a start date that is older than 10 days, you will receive an error and the command will return no results.
44
+
By default, this cmdlet returns up to 1000 results, with a maximum of 5000 results. If your data exceeds the result size, query in multiple rounds or use smaller StartDate and EndDate intervals.
45
45
46
-
To search for message data that is greater than 10 days old, use the Start-HistoricalSearch and Get-HistoricalSearch cmdlets.
46
+
The time stamps on the output are in UTC time format. That might be different from the time format that you used for the -StartDate and the -EndDate parameters.
47
47
48
-
By default, this cmdlet returns a maximum of 1000 results, and will timeout on very large queries. If your query returns too many results, consider splitting it up using smaller StartDate and EndDate intervals.
48
+
Pagination isn't supported in this cmdlet. Throttling based on the number of queries ensures the fair use of resources:
49
49
50
-
The time stamps on the output are in UTC time format. That might be different from the time format that you used for the -StartDate and the -EndDate parameters.
50
+
- Use the ResultSize parameter to adjust the size of your results.
51
+
- To query subsequent data, use the StartingRecipientAddress and EndDate parameters with the values from the **Recipient address** and **Received Time** properties respectively of the previous result in the next query.
52
+
- Be as precise as possible. Narrow the gap between StartDate and EndDate and use additional parameters (for example, SenderAddress) where possible.
53
+
- Use MessageTraceId where possible (required for messages sent to more than 1000 recipients).
54
+
55
+
The StartingRecipientAddress parameter is used with the EndDate parameter to query subsequent data for partial results that are partial while avoiding duplication. Query subsequent data of your partial results by taking the **Recipient address** and **Received Time** values of the last record of your partial results and using them as the values for the StartingRecipientAddress and EndDate parameters respectively in your next query.
51
56
52
57
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://learn.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
The StartingRecipientAddress parameter is used with the EndDate parameter to query subsequent data for partial results while avoiding duplication. Query subsequent data by taking the **Recipient address** and **Received Time** values of the last record of the partial results and using them as the values for the StartingRecipientAddress and EndDate parameters respectively in the next query.
The Status parameter filters the results by the delivery status of the message. Valid values for this parameter are:
229
+
The Status parameter filters the results by the delivery status of the message. Valid values are:
223
230
224
-
- None: The message has no delivery status because it was rejected or redirected to a different recipient.
225
-
- GettingStatus: The message is waiting for status update.
226
-
- Failed: Message delivery was attempted and it failed or the message was filtered as spam or malware, or by transport rules.
227
-
- Pending: Message delivery is underway or was deferred and is being retried.
228
231
- Delivered: The message was delivered to its destination.
229
232
- Expanded: There was no message delivery because the message was addressed to a distribution group and the membership of the distribution was expanded.
230
-
- Quarantined: The message was quarantined.
233
+
- Failed: Message delivery was attempted and it failed.
231
234
- FilteredAsSpam: The message was marked as spam.
235
+
- GettingStatus: The message is waiting for status update.
236
+
- None: The message has no delivery status because it was rejected or redirected to a different recipient.
237
+
- Pending: Message delivery is underway or was deferred and is being retried.
238
+
- Quarantined: The message was quarantined.
239
+
240
+
You can separate multiple values separated by commas.
0 commit comments