I'm running into an issue with trying to see emails sent to Distribution Groups in our MS Exchange 2016 (on-premise) server. When I go through the message tracking log here's what I'm noticing:
Emails sent via Outlook clients to a Distribution Group will show a Receive Event for the distribution group SMTP address used in the email to the group.
Emails sent via standard SMTP protocols (either internal or external) appear to show up just as individual message events to every person on the distribution group.
This is making it incredibly difficult to write some powershell scripts to give us a count of the actual usage of our Distribution Groups given we're not seeing an "Expand" event in the Message Tracking Log.
Is there any additional logging we can turn up on Exchange to ensure these events are recorded or do we need to look at a journaling product to have a better idea of the hits we're seeing on our DGs in Exchange?

