Symantec 10744983 Administration Guide - Page 202

View tracking information or search the log, Table 10-2, Description, Criteria

Page 202 highlights

202 Administering the system Getting status information Table 10-2 Criteria Message ID Disposition Action taken Connection IP Target IP Group policy Filter policy Virus Attachment Source Choices for the optional search criteria (continued) Description Unique identifier typically generated by the email software initiating the sending of the message and included as a message header. Because the Message ID is not generated by Symantec Mail Security, the uniqueness of the ID cannot be guaranteed. At times, distributors of spam have used this header to mask the identity of a message originator. Verdict and/or other characteristics of a message such as Message has malformed mime. A dropdown list of disposition choices is provided. What happened to the message. A dropdown list of actions is provided. Connection IP used to receive the message. IP address of the message destination. Name of the group policy applied to the message. Name of the filter policy applied to the message. Name of the virus attached to the message. Name of a file attached to the message. Whether the message is internal or external. With the filtering criteria selected, click Display Filtered to search through the message tracking logs for as many messages as match or partially match the chosen criteria. While searching, the following rules are used: ■ No more than 250 messages are allowed per search on each Scanner being searched. ■ Freeform text fields are case insensitive substring searches. Next, examine the results returned from the search. By clicking a specific message, you can view the filters placing this message into the queue. Also, you can view other details about the specific message by selecting it. View tracking information or search the log Follow these procedures to view message tracking information or search the message audit log.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249

Table 10-2
Choices for the optional search criteria
(continued)
Description
Criteria
Unique identifier typically generated by the email software initiating
the sending of the message and included as a message header.
Because the Message ID is not generated by Symantec Mail Security,
the uniqueness of the ID cannot be guaranteed. At times,
distributors of spam have used this header to mask the identity of
a message originator.
Message ID
Verdict and/or other characteristics of a message such as Message
has malformed mime. A dropdown list of disposition choices is
provided.
Disposition
What happened to the message. A dropdown list of actions is
provided.
Action taken
Connection IP used to receive the message.
Connection IP
IP address of the message destination.
Target IP
Name of the group policy applied to the message.
Group policy
Name of the filter policy applied to the message.
Filter policy
Name of the virus attached to the message.
Virus
Name of a file attached to the message.
Attachment
Whether the message is internal or external.
Source
With the filtering criteria selected, click Display Filtered to search through the
message tracking logs for as many messages as match or partially match the
chosen criteria.
While searching, the following rules are used:
No more than 250 messages are allowed per search on each Scanner being
searched.
Freeform text fields are case insensitive substring searches.
Next, examine the results returned from the search. By clicking a specific message,
you can view the filters placing this message into the queue. Also, you can view
other details about the specific message by selecting it.
View tracking information or search the log
Follow these procedures to view message tracking information or search the
message audit log.
Administering the system
Getting status information
202