Email attachments in search results show the date of Top Level message in the preview pane of Symantec Enterprise Vault (EV) Compliance Accelerator (CA) or Discovery Accelerator (DA).

Article:TECH181976  |  Created: 2012-02-22  |  Updated: 2012-11-06  |  Article URL
Article Type
Technical Solution



Accelerator search results with e-mail message attachments displays the top level message date and time while viewing the attachments.


The display of the Top Level message’s date and time is by design.


Consider as an example Figure 1 where an email message contains an attachment which is another email message having an older date.



Figure 1: Example email with an older email as an attachment.

 The Email “Test Today 23 Feb 2012 -2” as shown in Figure 1 contains another message, ”Test Today-27 Dec 2011”, as a attachment as shown in Figure 2.


Figure 2: Sample email showing the atteched email message.


The Details of both sample emails:

1.    Subject: “Test Today 23 Feb 2012 -2”. Sent Date: Thu 2/23/2012 5:19 PM.

2.    Subject: “Test Today-27 Dec 2011”. Sent Date: Wed 12/28/2011 7:38 PM.


An Accelerator search performed with the search criteria “Test Today 23 Feb 2012 -2”  will capture the message containing the attachment.  The Preview of the message would be as shown in Figure 3 (examples below are from DA).



Figure 3: Preview of the top level sample message.


Clicking the email in the “Review” section shows the preview of the message showing the date & time of that message.  When the email attachment is clicked, the date & time of the attached email is not displayed, but the “Top level message” date & time is displayed.


As per Figure 3, the Date & Time of the Email “Test Today 23 Feb 2012 -2” is displayed correctly as “Date : Thu 2/23/2012 5:10 PM”.  After clicking on the attached Email - “Test Today-27 Dec 2011” - the Date & Time shown is “Date : Thu 2/23/2012 5:12 PM”, which is not the Date & Time of the attached message, as shown in Figure 4.  The Date & Time of the attached message is “Date : Wed 12/28/2011 7:38 PM”.




Figure 4: Preview of the attached message.


As per Figure 4, the attachment message Date & Time is shows to be the same as the Top Level Message.




On viewing attachments in the CA or DA preview pane, the Date shown is always the Date of the Top Level message. This is by design so reviewers can easily tell the attachments were a part of the message from that date. As per ETrack : 2724940 there is no way to see the contents of attachment file through MAPI, this
behavior is by design.

Supplemental Materials


DA 'Date' of email attachments don't match the Outlook 'Sent date' of said attachments

Article URL

Terms of use for this information are found in Legal Notices