XCCC: Description of the Exchange Conferencing Management Service Audit Log, Part 1 (315824)



The information in this article applies to:

  • Microsoft Exchange 2000 Conferencing Server SP1
  • Microsoft Exchange 2000 Conferencing Server SP2

This article was previously published under Q315824

SUMMARY

Administrators can use audit logs to analyze the operation of the Exchange Conferencing Management Service (CMS).

MORE INFORMATION

The following tables show the entries in the comma-delimited text files that are created in the \\Servername\Share.ecs folder.

Conference Scheduled


The following table shows entries in the Conference Management Service log file for the Conference Scheduled event.

Default status: ON
Field NameEntry
Event ID(numeric identifier)
Message TextConference scheduled
Event Modifier(not applicable)
Datedate (format: YYYY-MM-DD)
Time time (format: HH:MM:SS, GMT)
Component making the log entryMA (Meeting Agent)
Meeting ID(numeric meeting identifier)
Conference Home Server Hostnameconference home server hostname
Conference Subject(conference subject)
Client Access URL(client access URL)
Resource Mailbox Alias(resource mailbox alias)
Client's Mailbox Address(not applicable)
Conference Organizer's Mailbox Address(conference organizer's mailbox address)
0-private, 1-public0=private, 1=public
Time-taken (in milliseconds)(Request received - conference scheduled)
Message Size (in bytes)(request message size)
Provider name(not applicable)
Time-slot start dateConference start date (format: YYYY-MM-DD)
Time-slot start timeConference start time (format: HH:MM:SS, GMT)
Time-slot end dateConference end date (format: YYYY-MM-DD)
Time-slot end timeConference end time (format: HH:MM:SS, GMT)

Conference Updated


The following table shows entries in the Conference Management Service log file for the Conference Updated event.

Default status: OFF
Field NameEntry
Event ID(numeric identifier)
Message TextConference profile updated
Event Modifier(reason) Note: Possible reasons: Property updated, Multiple properties updated.
Datedate (format: YYYY-MM-DD)
Time time (format: HH:MM:SS, GMT)
Component making the log entryMA (Meeting Agent)
Meeting ID(numeric meeting identifier)
Conference Home Server Hostnameconference home server hostname
Conference Subject(conference subject)
Client Access URL(client access URL)
Resource Mailbox Alias(resource mailbox alias)
Client's Mailbox Address(not applicable)
Conference Organizer's Mailbox Address(conference organizer's mailbox address)
0-private, 1-public0=private, 1=public
Time-taken (in milliseconds)(Request received - conference updated)
Message Size (in bytes)(request message size)
Provider name(not applicable)
Time-slot start dateConference start date (format: YYYY-MM-DD)
Time-slot start timeConference start time (format: HH:MM:SS, GMT)
Time-slot end dateConference end date (format: YYYY-MM-DD)
Time-slot end timeConference end time (format: HH:MM:SS, GMT)


Conference Cancelled


The following table shows entries in the Conference Management Service log file for the Conference Cancelled event.

Default status: OFF
Field NameEntry
Event ID(numeric identifier)
Message TextConference cancelled
Event Modifier(not applicable)
Datedate (format: YYYY-MM-DD)
Time time (format: HH:MM:SS, GMT)
Component making the log entryMA (Meeting Agent)
Meeting ID(numeric meeting identifier)
Conference Home Server Hostnameconference home server hostname
Conference Subject(conference subject)
Client Access URL(client access URL)
Resource Mailbox Alias(resource mailbox alias)
Client's Mailbox Address(not applicable)
Conference Organizer's Mailbox Address(conference organizer's mailbox address)
0-private, 1-public0=private, 1=public
Time-taken (in milliseconds)(Request received - conference cancelled)
Message Size (in bytes)(request message size)
Provider name(not applicable)
Time-slot start dateConference start date (format: YYYY-MM-DD)
Time-slot start timeConference start time (format: HH:MM:SS, GMT)
Time-slot end dateConference end date (format: YYYY-MM-DD)
Time-slot end timeConference end time (format: HH:MM:SS, GMT)


CTP Indicates a Change in a Resource Availability


The following table shows entries in the Conference Management Service log file for the CTP Indicates a Change in a Resource Availability event.

Default status: ON
Field NameEntry
Event ID(numeric identifier)
Message TextResource availability changed
Event Modifier(reason) Note: Possible reasons: Resource free, Resource busy.
Datedate (format: YYYY-MM-DD)
Time time (format: HH:MM:SS, GMT)
Component making the log entryMA (Meeting Agent)
Meeting ID(not applicable)
Conference Home Server Hostname(not applicable)
Conference Subject(not applicable)
Client Access URL(not applicable)
Resource Mailbox Alias(resource mailbox alias)
Client's Mailbox Address(not applicable)
Conference Organizer's Mailbox Address(not applicable)
0-private, 1-public(not applicable)
Time-taken (in milliseconds)(Notification received - resource mailboxes updated)
Message Size (in bytes)(not applicable)
Provider name(provider name)
Time-slot start date(not applicable)
Time-slot start time(not applicable)
Time-slot end date(not applicable)
Time-slot end time(not applicable)


Client Connected


The following table shows the entries in the Conference Management Service log file for the Client Connected event.

Default status: OFF
Field NameEntry
Event ID(numeric identifier)
Message TextUser joined a conference
Event Modifier(not applicable)
Datedate (format: YYYY-MM-DD)
Time time (format: HH:MM:SS, GMT)
Component making the log entryCMS (Conference Management Service)
Meeting ID(numeric meeting identifier)
Conference Home Server Hostnameconference home server hostname
Conference Subject(conference subject)
Client Access URL(client access URL)
Resource Mailbox Alias(resource mailbox alias)
Client's Mailbox Address(client's mailbox address)
Conference Organizer's Mailbox Address(conference organizer's mailbox address)
0-private, 1-public0=private, 1=public
Time-taken (in milliseconds)(Request received - CTP responded)
Message Size (in bytes)(not applicable)
Provider name(not applicable)
Time-slot start dateConference start date (format: YYYY-MM-DD)
Time-slot start timeConference start time (format: HH:MM:SS, GMT)
Time-slot end dateConference end date (format: YYYY-MM-DD)
Time-slot end timeConference end time (format: HH:MM:SS, GMT)

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

315826 XCCC: Description of the Exchange 2000 Conference Management Service Audit Log, Part 2


Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbinfo KB315824