To get an list of emails running in and out from your exchange server you can use this powershell to retrieve all emails.
Get-TransportServer | Get-MessageTrackingLog -Start “12/03/2012 12:00am” -ResultSize Unlimited -EventId “receive” | Where {$_.Recipients -like “address@domain.com”}
-EventId has the following syntaxes:
BADMAIL
DEFER
DELIVER
DSN
EXPAND
FAIL
POISONMESSAGE
RECEIVE
REDIRECT
RESOLVE
SEND
SUBMIT
TRANSFER
And you can change -like “address@domain.com” to for example -match “@domain.com” to get ALL emails.
