Cisco Cisco Content Security Management Appliance M1070 Guía Del Usuario
Chapter 5 Tracking Email Messages
5-4
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Note
Tracking does not support wildcard characters or regular expressions. Tracking
searches are not case sensitive.
searches are not case sensitive.
Step 2
Locate email messages you want to track.
Use the following search parameters when you run a message tracking query:
•
Envelope Sender: Select Begins With, Is, or Contains, and enter a text string
to search for in the envelope sender. Valid parameter values are email
addresses, user names, and domains.
to search for in the envelope sender. Valid parameter values are email
addresses, user names, and domains.
•
Envelope Recipient: Select Begins With, Is, or Contains, and enter text to
search for in the envelope recipient. Valid parameter values are email
addresses, user names, and domains.
search for in the envelope recipient. Valid parameter values are email
addresses, user names, and domains.
If you use the alias table for alias expansion on your Email Security
appliances, the search finds the expanded recipient addresses rather than the
original envelope addresses. In all other cases, message tracking queries find
the original envelope recipient addresses.
appliances, the search finds the expanded recipient addresses rather than the
original envelope addresses. In all other cases, message tracking queries find
the original envelope recipient addresses.
•
Subject: Select Begins With, Is, Contains, or Is Empty, and enter a text string
to search for in the message subject line.
to search for in the message subject line.
Note
International character sets are not supported in the subject header.
•
Message Received: Specify a date and time range for the query using “Last
Day,” “Last 7 Days,” or “Custom Range.” Use the “Last Day” option to search
for messages within the past 24 hours, and use the “Last 7 Days” option to
search for messages within the past full seven days, plus the time that has
passed on the current day.
Day,” “Last 7 Days,” or “Custom Range.” Use the “Last Day” option to search
for messages within the past 24 hours, and use the “Last 7 Days” option to
search for messages within the past full seven days, plus the time that has
passed on the current day.
If you do not specify a date, the query returns data for all dates. If you specify
a time range only, the query returns data for that time range across all
available dates. If you specify the current date and 23:59 as the end date and
time, the query returns all data for the current date.
a time range only, the query returns data for that time range across all
available dates. If you specify the current date and 23:59 as the end date and
time, the query returns all data for the current date.
Dates and times are converted to GMT format when they are stored in the
database. When you view dates and times on an appliance, they are displayed
in the local time of the appliance.
database. When you view dates and times on an appliance, they are displayed
in the local time of the appliance.