Analyzing Exchange Logs using ExLogAnalyzer Tool

ExLogAnalyzer is a framework that parses logs and triggers events based on log entries. It can analyze (replay) logs across multiple servers and multiple log types in a single run. ExLogAnalyzer is extensible via per log type extension (which’is the layer that maps log syntax into semantics) as well as extensible via analyzers for such […]

ExLogAnalyzer is a framework that parses logs and triggers events based on log entries. It can analyze (replay) logs across multiple servers and multiple log types in a single run. ExLogAnalyzer is extensible via per log type extension (which’is the layer that maps log syntax into semantics) as well as extensible via analyzers for such extensions. Goal of ExLogAnalyzer is to make it super easy for developers / customers to write their own analyzers which mine logs to answer question at hand. Note that analyzers don’t do any kind of parsing, but they process events raised by the extension and through the data made available to event arguments, do the appropriate accounting. ExLogAnalyzer was started as an internal project in Microsoft Exchange and has 3 log type extensions already implemented, but it’s designed to work for any product once the appropriate extension is written.

Full Article: Making sense of Exchange Logs using ExLogAnalyzer | Download: ExLogAnalyzer