Mumbai Security and Compliance User Group

 View Only

How to create message tracking template for exchange logs. 

Sep 20, 2012 01:24 PM

Problem Statement: You have completed integration of MS Exchange and are able to see message tracking logs on SSIM. You now want to search email sent by a particular sender or sent to a particular recipient during a certain time interval. Further you want this functionality to be available in a templatized format rather than creating  or editing a query for every case.

Solution:

Create a new query with the following conditions: -

Note: You need to manually enter '? [Query Parameter]'

Once you create the query you will see a template as follows: -

You can now search by entering the recipient's email address in the place where you see '? [Query Parameter]' and executing the query. You can also select the desired time interval.

 

The query will show you all the emails in which the searched recipient is either the sole recipient or one of the several recipeients.

 

Similarly you can also create a query to search based on sender by creating the following query: -

 

Note: - Sender Field is avilable in the data incident section.

You can now search by entering the sender's email address in the place where you see '? [Query Parameter]' and executing the query. You can also select the desired time interval.

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Related Entries and Links

No Related Resource entered.