Enabling SMTP logs on your Microsoft Exchange Server 2003, 2007, and 2010

To prepare your Microsoft Exchange Server 2003, 2007 and 2010 to communicate with IBM® QRadar®, enable SMTP event logs.

Procedure

  1. Start the Exchange Management Console.
  2. To configure your receive connector, choose one of the following options:
    • For edge transport servers, select Edge Transport in the console tree and click the Receive Connectors tab.
    • For hub transport servers, select Server Configuration > Hub Transport in the console tree, select the server, and then click the Receive Connectors tab.
  3. Select your receive connector and click Properties.
  4. Click the General tab.
  5. From the Protocol logging level list, select Verbose.
  6. Click Apply.
  7. Click OK.
  8. To configure your send connector, choose one of the following options:
    • For edge transport servers, select Edge Transport in the console tree and click the Send Connectors tab.
    • For hub transport servers, select Organization Configuration > Hub Transport in the console tree, select your server, and then click the Send Connectors tab.
  9. Select your send connector and click Properties.
  10. Click the General tab.
  11. From the Protocol logging level list, select Verbose.
  12. Click Apply.
  13. Click OK.