Cisco Cisco Content Security Management Appliance M1070 ユーザーガイド
5-7
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 5 Tracking Email Messages
To narrow the result set:
Step 1
Float the cursor over the value that you want to add as a condition. The value is
highlighted in yellow.
highlighted in yellow.
Use the following parameter values to refine the search:
–
Date and time
–
Message ID (MID)
–
Host (the Email Security appliance)
–
Sender’s user name
–
Sender’s domain
–
Recipient’s user name
–
Recipient’s domain
–
Subject line of the message
Step 2
Click the value to refine the search.
The Results section displays the messages that match the original query
parameters and the new condition that you added.
parameters and the new condition that you added.
Step 3
If necessary, click additional values in the results to further refine the search.
Note
To remove query conditions, click Clear and run a new tracking query.
Understanding Tracking Query Results
Tracking query results list all of the messages that match the criteria specified in
the tracking query. Except for the Message Event options, the query conditions are
added with an “AND” operator. The messages in the result set must satisfy all of
the “AND” conditions. For example, if you specify that the envelope sender
begins with
the tracking query. Except for the Message Event options, the query conditions are
added with an “AND” operator. The messages in the result set must satisfy all of
the “AND” conditions. For example, if you specify that the envelope sender
begins with
J
and you specify that the subject begins with
T
, the query returns a
message only if both conditions are true for that message.