Veritas Enterprise Vault™ Setting up SMTP Archiving

Last Published:
Product(s): Enterprise Vault (12.2)
  1. About this guide
    1.  
      Introducing this guide
    2. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Introducing Enterprise Vault SMTP Archiving
    1.  
      About Enterprise Vault SMTP Archiving
    2.  
      About SMTP Journaling
    3.  
      About Selective SMTP Journaling
    4.  
      About SMTP Mailbox Journaling
    5.  
      Configuring SMTP Journaling and SMTP Mailbox Journaling
    6.  
      Configuring Selective SMTP Journaling and SMTP Mailbox Journaling
    7.  
      Using Exchange Server to journal messages to Enterprise Vault
  3. Installing SMTP Archiving
    1.  
      About installing Enterprise Vault SMTP Archiving components
    2.  
      Reporting
    3.  
      Monitoring
  4. Configuring SMTP Archiving
    1.  
      Steps to configure SMTP Archiving
    2.  
      Creating archives for SMTP messages
    3. Configuring retention categories and SMTP policies
      1. About X-Headers
        1.  
          About X-Kvs X-Headers
        2.  
          Searching archives for messages with specific X-Headers
    4. Configuring the Enterprise Vault SMTP Servers in the site
      1.  
        Entering the name or IP address of connecting hosts
      2.  
        Obtaining an SSL/TLS certificate
      3.  
        Configuring message tracking for SMTP messages
    5. Adding SMTP target addresses
      1.  
        Additional configuration for Selective SMTP Journaling or SMTP Mailbox Journaling
      2.  
        Additional configuration for Compliance Accelerator
      3.  
        Adding a large number of SMTP target addresses
    6. Adding an SMTP Archiving task
      1.  
        About the SMTP holding folder
      2.  
        Keeping safety copies of archived messages
      3.  
        Task summary reports
  5. Configuring target address rewriting
    1.  
      About target address rewriting
    2.  
      Steps to configure target address rewriting
    3.  
      Adding SMTP target addresses
    4.  
      Adding target address aliases
  6. PowerShell cmdlets
    1.  
      About the PowerShell cmdlets for SMTP Archiving

Configuring message tracking for SMTP messages

When you enable message tracking for the site, each Enterprise Vault SMTP server records details of each message that it receives. The SMTP server stores the message details in a message tracking log file. You can use the SMTP server log files for mail flow analysis, reporting, and troubleshooting. For example, you can compare the contents of the log files with the log file on the relay MTA to discover which messages were sent by the relay MTA but not received by an Enterprise Vault SMTP server.

Enterprise Vault generates a new message tracking log file every day. If the size of the file exceeds 10 MB, Enterprise Vault creates a new log file. The log file name format is EVSMTPMessageTracking_DNSAliasName_ yyyymmdd_n.log, where n is the incremental number that Enterprise Vault appends to the log file name if the log file size exceeds the 10-MB limit. For example, EVSMTPMessageTracking_EV.example.com_20170128_1.log.

The default location for the message tracking log file is Reports\SMTP\SMTPService in the Enterprise Vault program folder. You can change the location of the log file by editing the SMTP server properties in the Administration Console. Alternatively, you can use the cmdlet, Set-EVSMTPMessageTrackingLogLocation. In a Building Blocks environment, Enterprise Vault creates the log file in the message tracking log location on the active server and uses the name of the active server in the log file name.

Enterprise Vault assigns the Local System account and the local Administrators group full control on the folder that stores the message tracking log file.

You can configure the number of days to keep the log files on the server by editing the SMTP server properties in the Administration Console or using the Set-EVSMTPServerSettings cmdlet. Log files that are older than the specified number of days are deleted.

Table: Attributes in message tracking log describes the attributes in the message tracking log. The attributes in the log file are in comma-separated value (.csv) format, so that you can easily import the file contents into a spreadsheet.

Table: Attributes in message tracking log

Attribute

Description

unid

The unique ID of the message. This ID is unique to the message on each SMTP server.

qid

The ID of message in the SMTP message queue.

msgid

The Internet Message-ID of the message. This ID is present in the message header of each message that is stored in the SMTP holding folder.

subject

The subject line of the message.

mta

The name of the Message Transfer Agent (MTA) that sent the message to the SMTP server.

size

The size of the message, in bytes.

sender

The email address of the sender of the message as processed by the MTA.

submit-time

The time when the message is received by the SMTP server and placed in the SMTP holding folder.