Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The 

findevent

 CLI command simplifies the process of tracking messages within the system using the 

onbox mail log files. The 

findevent

 CLI command allows you to search through the mail logs for a 

particular message by searching for a message ID or a regular expression match against the subject 
header, envelope sender or envelope recipient. You can display results for the current log file, all the log 
files, or display log files by date. When you view log files by date, you can specify a date or a range of 
dates.

After you identify the message you want to view logs for, the 

findevent

 command displays the log 

information for that message ID including splintering information (split log messages, bounces and 
system generated messages). The following example shows the 

findevent

 CLI command tracking the 

receiving and delivery a message with “confidential” in the subject header:

  by example.com with SMTP; 14 Feb 2007 22:11:37 -0800

From: user123@example.com

To: 4031@test.example2.com

Subject: Testing

Message-Id: <20070215061136.68297.16346@example.com>

example.com> findevent

Please choose which type of search you want to perform:

1. Search by envelope FROM

2. Search by Message ID

3. Search by Subject

4. Search by envelope TO

[1]> 3

Enter the regular expression to search for.

[]> confidential

Currently configured logs:

1. "mail_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll

Enter the number of the log you wish to use for message tracking.

[]> 1

Please choose which set of logs to search: