Exchange 2013 Mailbox servers are capable of using several anti-spam agents to reduce the amount of unwanted e-mail messages that enter your organization. All anti-spam activity is logged by Mailbox servers, and this data can be used to troubleshoot issues and generate reports. In this recipe, you'll learn how to search the anti-spam agent logs using the Exchange Management Shell. Notice that these anti-spam agents are not installed by default.
The Get-AgentLog cmdlet can be used to parse the anti-spam agent logs. To find all the log entries for a particular agent, filter the output based on the Agent property:
Get-AgentLog | ?{$_.Agent -eq 'Content Filter Agent'}
When running this command in a busy environment, you may get back a large number of results, and you may want to consider refining your filter and perhaps limiting the date range to a specific period of time.