Cisco Cisco Email Security Appliance C190 Guia Do Utilizador
25-4
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 25 Tracking Messages
Working with Message Tracking Search Results
Working with Message Tracking Search Results
Actions you can take when working with search results:
•
Show more than 250 search results by returning to the search criteria, clicking Advanced, scrolling
to the Query Settings, and setting the maximum number of results to 1000.
to the Query Settings, and setting the maximum number of results to 1000.
•
Show more results per page by choosing an option from the top right side of the search results
section.
section.
•
Navigate through multiple pages of search results from the top right side of the search results
section.
section.
•
Narrow your search results by floating the cursor over a value in the search results that you want to
add as a condition. If an orange highlight appears, you can click that value to narrow the search by
that criterion. This adds the additional criterion to the search criteria. For example, if you search for
messages sent to a particular recipient, you can then click on a sender name in the search results to
find all messages to that recipient from that sender within the time range (and meeting any other
criteria) that you originally specified.
add as a condition. If an orange highlight appears, you can click that value to narrow the search by
that criterion. This adds the additional criterion to the search criteria. For example, if you search for
messages sent to a particular recipient, you can then click on a sender name in the search results to
find all messages to that recipient from that sender within the time range (and meeting any other
criteria) that you originally specified.
•
If more than 1000 messages match your search criteria, you can click Export All (a link at the top
right of the search results section) and export up to 50,000 search results as a comma-separated
values file and work with the data in another application.
right of the search results section) and export up to 50,000 search results as a comma-separated
values file and work with the data in another application.
•
View more details for a message by clicking Show Details in the row for that message. A new
browser window opens with the message details.
browser window opens with the message details.
•
For quarantined messages, you can click a link in the message tracking search results to view details
such as the reason the message was quarantined.
such as the reason the message was quarantined.
Note
If you clicked a link in a report page to view message details in Message Tracking, and the set of results
is not what you expected, this can occur if reporting and tracking were not both simultaneously and
continuously enabled during the time period you are reviewing.
is not what you expected, this can occur if reporting and tracking were not both simultaneously and
continuously enabled during the time period you are reviewing.
Message Details
Item
Description
Envelope and Header Summary section:
Received Time
Time that the Email Security appliance received the message.
Dates and times are displayed using the local time configured on the Email
Security appliance.
Security appliance.
MID
Unique IronPort message ID.
Message Size
Message size.
Subject
Subject line of the message.
The subject line in the tracking results may have the value “(No Subject)” if the
message does not have a subject, or if log files are not configured to record
subject headers. For more information, see
message does not have a subject, or if log files are not configured to record
subject headers. For more information, see
Envelope Sender
Address of the sender in the SMTP envelope.