What does the EventID defer denote when tracking a message within message tracker?
3. What does the EventID “DEFER” denote when tracking a message within Message Tracker? C) Message delivery was delayed.
Table of Contents
What is Hadiscard?

HADISCARD. A shadow message was discarded after the primary copy was delivered to the next hop. For more information, see Shadow redundancy in Exchange Server. HARECEIVE. A shadow message was received by the server in the local database availability group (DAG) or Active Directory site.
How can I trace message ID?
The Message-ID property is displayed in the Internet headers section (Fig. 2.). The easiest way to find it is to copy the whole section’s content (right-click the section and choose Select All, then Copy), paste it into any text editor and use the editor’s search functionality to look for Message-ID.
How do I trace a message in Outlook?
Open message trace In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email & collaboration > Exchange message trace. To go directly to the message trace page, use https://admin.exchange.microsoft.com/#/messagetrace. At this point, message trace in the EAC opens.

How long are message tracking logs kept Exchange 2010?
30 days
By default, messages are retained in the dumpster for seven days, after which they are purged from the Exchange database. On the other hand, also by default, the Exchange tracking logs are maintained for a period of 30 days.
How do I track a message in Outlook?
Outlook keeps track of your delivery and read receipts. To view that information, open your sent items, and double-click a message. Then, click Tracking. And you can see when the receipts arrived in your inbox, and the recipient names.
How do I trace a message in Exchange server?
Run a message trace
- In the EAC, go to Mail flow > message trace.
- Depending on what you’re searching for, you can enter values in the following fields.
- If you’re searching for messages that are older than 7 days, configure the following settings: (otherwise you can skip this step):
- Click Search: to run the message trace.
What is message tracking in exchange 2010?
Message tracking is a feature of Hub Transport, Edge Transport, and Mailbox servers as these are the Exchange 2010 server roles that are involved in transmitting email messages around the network. I spend hours each week searching message logs for all kinds of interesting information.
How do I search for a message tracking log?
Getting Started with Searching Message Tracking Logs Using PowerShell Message tracking log searches are performed in the Exchange Management Shellby running the Get-MessageTrackingLogcmdlet. You can run this cmdlet with no parameters on any Edge Transport, Hub Transport or Mailbox server and it will return all of the log entries on that server.
How do I enable message tracking on a server?
Message tracking is an optional setting that is enabled by default. You can see the current status of message tracking on a server by opening the Properties of that server in the Exchange Management Console and looking at the Log Settings tab. You can also query this setting with the Exchange Management Shell.
What message content is stored in the message tracking log?
No message content is stored in the message tracking log. By default, the subject line of an email message is stored in the message tracking log. You might need to disable subject logging to comply with increased security or privacy requirements.