Adventures in querying the EventHistory table
Beginning with Exchange 2007 the Exchange database has had an internal table called EventHistory. This table has been used to track the events upon which several of the assistants are based and for other short term internal record keeping. The way to query the table hasn’t been publicized before but it has a number of uses:
- It may tell you the fate of a deleted item (for situations where Audit logging or store tracing was not in place at the time of the delete)
- It can list accounts who have recently touched a mailbox
- It can show you the clients that have touched a mailbox
I found this very nice and interesting blog by Exchange team.
You can read the full blog at https://blogs.technet.com/b/exchange/archive/2013/06/24/adventures-in-querying-the-eventhistory-table.aspx
Read my favorites blogs:
Designing a backup less Exchange 2010 Architecture
Microsoft Exchange 2010 CAS Array – Steps and Recommendations
Appear Offline in Microsoft Office Communicator Server 2007
Microsoft Exchange 2010 Test cases