How to extract IM conversations from IM Manager for external review

Article:HOWTO76998  |  Created: 2012-05-11  |  Updated: 2012-05-17  |  Article URL http://www.symantec.com/docs/HOWTO76998
Article Type
How To

Product(s)

Subject


Here are three methods to obtain the information from IM Manager:

  • Reviewer console
  • SQL database extract
  • Export function

Reviewer Console

The method to view and export IM conversations from is using the IM Manager Reviewer Console. 

1. Start the IM Manager reviewer console with a web browser and go to http://localhost/immanager (or http://<servername>/immanager). 

NOTE:  Prior to using the Reviewer Console it is necessary to create a reviewer account.  See the IM Manager Implementation Guide for complete steps.  Use the following steps to get to reviewer creation in the IM Manager Administration Console:

a. Open the IM Manager Administration Console.
b. Click on the Administration tab.
c. Click the Reviewer Management|Add Non-Directory Reviewer.

This creates an account that exists just in the IM Manager database. 

2.Fill in the information and click Submit to create the reviewer account.

To export the IM conversations from the search result click the Download Search Results hyperlink as shown in this screenshot:

There is a limitation that the downloading of search results is only for the 1000 records being shown.  If there are more than one thousand records it is necessary to click the LAST PAGE hyperlink.  This displays the last records of the 1000 and allows browsing the next 1000 as shown here:

 

 

See the following article for more details: Maximum of 1000 records saved when Reviewer Search is downloaded.

Using a SQL query

Use the following SQL query to extract all messages from a user with a specific IM name from the IM Manager database:

DECLARE @imname char(50)

    -- Change the imnames below to the names you want to find

    SELECT @imname = ‘imnameUser XYZ'

    SELECT * from messages
    WHERE ((sender_imname = @imname OR recipient_imname = @imname))

    -- between the date range
    -- edit the dates here to adjust the timeframe

    AND message_date >= '2004-01-01 00:00:00'
    AND message_date <= '2005-03-13 00:00:00'

 

Change the value of the IM name. Change the value of the beginning date. Change the value of the ending date. Run the query.

The following is an example query searching for user bubbles99@aol.com from March 1, 2011 to March 30, 2012:

DECLARE @imname char(50)

    -- Change the imnames below to the names you want to find

    SELECT @imname = ‘bubbles99@aol.com'

    SELECT * from messages
    WHERE ((sender_imname = @imname OR recipient_imname = @imname))

    -- between the date range
    -- edit the dates here to adjust the timeframe

    AND message_date >= '2011-03-01 00:00:00'
    AND message_date <= '2012-03-30 00:00:00'

NOTE:  This method is just raw database data.  No formatting is done and duplicate messages are not filtered out (see this article about duplicate messages: IM Manager Exports Contain Duplicate Text).

Use the IM Manager export function

IM Manager has the ability to create email messages out of an IM conversation.  Organizations typicaly send these email messages the electronic archiving solution used for email archiving.  This allows an organization to review the IM conversations in the same way email conversations are reviewed.

The following is an example email of an IM conversation:

 

 

NOTE:  Before doing this it is recommended to set up an Outlook rule on Subject that filters email containing the words "Symantec IMManager conversation export".

This export function can be used to retrieve all the IM conversations for a user.  They are sent to a reviewer's email address and can be reviewed similar to any other email.  Use the following steps to export the IM conversations:

1. Ensure that IIS SMTP is installed and configured to send email from the IM Manager server.  Use this article for the steps: How to Set up IIS SMTP Service to Send Email.
2. Download the IM Manager Microsoft Exchange Transform XSL file and save it to the IM Manager server in:

32-bit OS: c:\Program Files\Symantec\IMManager\imarchive
64-bit OS: c:\Program Files (x86)\Symantec\IMManager\imarchive

as transform-singleuser.xsl.

3. Edit the file in an editor and change the following line:

var journalingEmailboxname = "john.doe@symantec.com";

by adding the email address of the user to review the emails.  For example if the reviewer's email address is john.doe@symantec.com then change it to:

var journalingEmailboxname = "john.doe@symantec.com";

The following screenshot shows this change:

4. Save the file and exit the editor.
5. Create an export job in the IM Manager Administration console.

a. Open the IM Manager Administration Console.
b. Click on the Administration tab.
c. Click the Configuration|Export menu item.
d. Click the Add button to add an export job.
e. Enter a job name in the Job Name field.
f. Ensure that the Transform XSL filename is the name of the XSL file saved and edited above.
g. Click the Submit button to save the job information.

6. Export the IM conversations.

a. Click the Export hyperlink of the new export job.
b. On the Date Criteria tab enter either a Date Range or a Relative Days Range.
c. On the Filter tab enter the IM name of the user in the IM field (see the following article if unable to enter the filter: Unable to enter filter text when running an export job).  

The following is an example of finding the IM conversations for an IM name of bubbles99@aol.com:

d. Click on the Scheduler Settings tab.
e. Ensure that the Immediate radio option is selected.
f. If necessary enter credentials to the IM Manager database (typically the IM Manager serivce account credentials).
g. Click the Export button.

 


 


 

 

 



Article URL http://www.symantec.com/docs/HOWTO76998


Terms of use for this information are found in Legal Notices