Logging All Email to or from a Specific Address

A common task for Admins and Auditors is to keep a daily log for emails to specific addresses.

The log can be used to determine workload or communication monitoring.

GAT makes this task simple.

Let us look at an example of a daily log of email sent directly to ‘support’

This example will find only email with ‘support’ in the ‘Sent To:’ field, sometimes ‘support’ can be cc’ed or Bcc’ed, if you want to record these too, select ‘Any Recipient’

You will see you have a selection of search filters in the ‘General Search’, these are

Subject Select emails where the subject matches the string
Any Email Select where the search address is in any position
From Select where the search address is in the ‘From:’ position
Any Recipient Select where the search address is in any recipient position
Sent To Select where the search address is in the ‘Sent To:’ position
CC Select where the search address is in the ‘cc:’ position
BCC Select where the search address is in the ‘bcc:’ position
Filename Select where the search line matches any attached file name

Having set the selection criteria, we next select the date, as this is a daily log we start with today’s date. Clicking on ‘Search’ will return all the emails that match the criteria already sent today. If no matches are returned it does not matter, we have now built our audit policy which we are going to schedule.

Next click on ‘Schedule/Save’ – this will take us through to the scheduler.

You can see the search policy is automatically carried through. You can select the run period, in this case, we selected ‘every day after midnight’ (this will be midnight your time if you set your timezone in GAT).

GAT is clever enough to automatically move the start date for each new report by the amount of time in the period you select. So if you select a day, the next start date will be today’s date+1. If it was a weekly schedule you picked it will be today’s date+7.

You can also select a user(s), or a group(s) – comma separated – to get copies of the report.

Comments

comments