Cisco Cisco Email Security Appliance C170 ユーザーガイド

ページ / 324
 
3-4
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
OL-25138-01
Chapter 3      Tracking Email Messages
Understanding Tracking Query Setup
Figure 3-3
Advanced Options for Tracking
Note
Tracking does not support wildcard characters or regular expressions. Tracking searches are not case 
sensitive.
You can use the following search parameters when you run a message tracking query:
  •
Envelope Sender: Select “Begins With,” “Is,” or “Contains,” and enter a text string to search for in 
the envelope sender. Valid parameter values are email addresses, usernames, and domains.
  •
Envelope Recipient: Select “Begins With,” “Is,” or “Contains,” and enter text to search for in the 
envelope recipient. Valid parameter values are email addresses, usernames, and domains.
If you use the alias table for alias expansion, the search finds the expanded recipient addresses rather 
than the original envelope addresses. In all other cases, message tracking queries find the original 
envelope recipient addresses.
  •
Subject: Select “Begins With,” “Is,” “Contains,” or “Is Empty,” and enter a text string to search for 
in the message subject line. 
Note
International character sets are not supported in the subject header.
  •
Dates and Times: Specify a date and time range for the query. If you do not specify a date, the query 
returns data for all dates. If you specify a time range only, the query returns data for that time range 
across all available dates.
Dates and times are converted to GMT format when they are stored in the database. When you view 
dates and times on an appliance, they are converted to the local time of the appliance.
Messages appear in the results only after they have been logged. Depending on the size of logs and 
the frequency of polling, there could be a small gap between the time when an email was sent and 
when it actually appears in tracking and reporting results. See 
 for more 
details.