Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Searching EV Journal for "Send on Behalf of" messages

Created: 20 Sep 2012 • Updated: 12 Nov 2012 | 4 comments
DeadEyedJacks's picture
This issue has been solved. See solution.

Hi Guys,

I've had a request to find all messages sent by any user on behalf of a shared mailbox.

So is there a way to filter the journal search to find messages based on this criteria?

TIA

D

Comments 4 CommentsJump to latest comment

DeadEyedJacks's picture

OK,

to partly answer my own question, these are included when searching by author.

But any way to filter out send on behalf of versus send as or sent by?

 

Authorised Symantec Consultant on Archiving and eDiscovery ASC, STS, SCS, SSE+

Microsoft, NetApp and VMware certified professional MCTS, MCSE, MCSA, NCDA, NCIE-BR, VCP, VTSP

Rob.Wilcox's picture

Wellllll the good news is that if you're a good boy and using EV 10.0.1 ... you can, in Advanced Search, include the result attribute PPDN and AUTH

 

If PPDN is present then it's a 'send on behalf of' mail.

 

Unfortunately you can't search for 'other attribute' PPDN <> "" 

.. that would be nice.

 

Also you can't really do the 'send as' query... the only way to check is to see if AUTH is not the person's whose archive you're looking at.

 

SOLUTION
DeadEyedJacks's picture

Rob,

Client is currently on EV9.0.3,

Useful to know those attributes.

Thanks for the input.

Authorised Symantec Consultant on Archiving and eDiscovery ASC, STS, SCS, SSE+

Microsoft, NetApp and VMware certified professional MCTS, MCSE, MCSA, NCDA, NCIE-BR, VCP, VTSP

Rob.Wilcox's picture

 

Well..

 

I tried it just now on EV 9.0.3, and the same attributes (and the same limitations) exist.