Get-MessageTrackingLog [-Server <ServerIdentity>] [-ResultSize <Integer> | Unlimited] [-Start <DateTime>] [-End <DateTime>] [-EventId <EventId>] [-InternalMessageId <InternalMessageId>] [-MessageId <MessageId>] [-MessageSubject <Subject>] [-Recipients <RecipientAddress1,RecipientAddress2...>] [-Reference <Reference>] [-Sender <SenderAddress>]
--导出某个用户某个时段的往来邮件记录
Get-MessageTrackingLog -ResultSize Unlimited -Start "12/01/2022 8:00AM" -End "1/12/2023 8:00PM" -Sender "liu@yhho.com" | Select-Object Timestamp,ServerHostname,ClientHostname,Source,EventId,Sender,@{l="Recipients";e={$_.Recipients -join " "}},MessageSubject | Sort-Object -Property Timestamp | Export-Csv "C:\liu.csv" -Encoding UTF8
Get-MessageTrackingLog
Steven · 2023-01-18 05:29 · 71 views · Exchange · old id 115