Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Enterprise Vault Reports

Created: 10 Jan 2014 | 5 comments

I've been asked if the following reports could be created for EV - 

  1. The amount of emails captured via journaling for a specific journal target mailbox during a specific time-frame. I know there is a canned report that will show emails captured over a specific month but they are looking for something more granular.
  2. A report that shows how many times a specific hotword comes up in a scheduled search. 

Any help in pointing me in the right direction would be appreciated. 

Operating Systems:

Comments 5 CommentsJump to latest comment

JesusWept3's picture

I take it you have multiple mailboxes going to the same archive correct? 
and for the scheduled search are you talking about DA? Does the search contain multiple words/phrases that they're searching against and they just want to single out that specific word? and is it that they just want it to be like "insider trading" was found in 200 email or do they want it to be like

Message #1: 5 times
Message #2: 1 time
Message #3: 4 times

etc?

Andrew Tankersley's picture

We only do journaling and all items captured go to the same archive

The scheduled searches are in CA. They are nightly searches that use a global hotword set.

Your "insider trading" scenario is what we're after. 

Andrew Tankersley's picture

Bumping this thread to see if anyone has any ideas...

GertjanA's picture

archivng rate, several solution sexist in forum, this for one:

https://www-secure.symantec.com/connect/forums/how-view-archive-rate-using-sql-query

As for how many times a word shows up in CA, no idea sorry...

Thank you, Gertjan, MCSE, MCITP,MCTS, SCS, STS
Company: www.t2.nl

www.quadrotech-it.com

www.symantec.com/vision

John Santana's picture

Thanks for sharing the tips here Gertjan !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.