Adventures in querying the EventHistory table

Beginning with Exchange 2007 the Exchange database has had an internal table called EventHistory.  This table has been used to track the events upon which several of the assistants are based and for other short term internal record keeping.  The way to query the table hasn’t been publicized before but it has a number of uses:

  • It may tell you the fate of a deleted item (for situations where Audit logging or store tracing was not in place at the time of the delete)
  • It can list accounts who have recently touched a mailbox
  • It can show you the clients that have touched a mailbox

I found this very nice and interesting blog by Exchange team.

You can read the full blog at

Read my favorites blogs:

Designing a backup less Exchange 2010 Architecture

Step by step guide for upgrading Active Directory from Microsoft Windows 2003 to Microsoft Windows Server 2008

Microsoft Exchange 2010 CAS Array – Steps and Recommendations

Appear Offline in Microsoft Office Communicator Server 2007

Microsoft Exchange 2010 Test cases

Microsoft Exchange Server 2010 Disaster Recovery

Microsoft Exchange Server 2010 Upgrade Guide

Comments (0)

Skip to main content