Customer emails through their Exchange event logs, and you need to read through them.
You *could* move them onto your Exchange box and view them there, but what if you couldnt access the box? What if it was a different version? What if you didn’t want to?
You can view other log types by using the /auxsource flag. Handy 
