Enterprise Vault™ Setting up SMTP Archiving

Last Published:
Product(s): Enterprise Vault (12.4)
  1. About this guide
    1.  
      Introducing this guide
    2. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Introducing Enterprise Vault SMTP Archiving
    1. About Enterprise Vault SMTP Archiving
      1.  
        SMTP Archiving configurations
      2.  
        SMTP Archiving components
    2.  
      About SMTP Journaling
    3.  
      About SMTP Group Journaling
    4.  
      About SMTP Mailbox Journaling
    5.  
      About SMTP Archiving licensing
    6.  
      Journaling messages to Enterprise Vault from Exchange Server or Office 365
  3. Installing SMTP Archiving
    1.  
      About installing Enterprise Vault SMTP Archiving components
    2.  
      Reporting
    3.  
      Monitoring
  4. Configuring SMTP Archiving
    1.  
      Steps to configure SMTP Archiving
    2.  
      Planning your configuration
    3. Configuring the Enterprise Vault SMTP Servers in the site
      1.  
        Entering the name or IP address of connecting hosts
      2.  
        Obtaining an SSL/TLS certificate
      3.  
        Configuring message tracking for SMTP messages
    4. Adding an SMTP Archiving task and holding folder
      1.  
        About the SMTP holding folder
      2.  
        Keeping safety copies of archived messages
      3.  
        Task summary reports
    5. Configuring retention categories and retention plans
      1.  
        Managing cascading retention settings on multiple archives
      2.  
        About changing retention on SMTP Group Journaling provisioning groups
    6. Creating SMTP policies
      1. About X-Headers
        1.  
          About X-Kvs X-Headers
        2.  
          Searching archives for messages with specific X-Headers
    7. Configuring archives for SMTP messages
      1.  
        Assigning multiple archives to spread the archiving load across servers
    8.  
      Adding SMTP routing addresses
    9.  
      Checking settings for SMTP Journaling
    10.  
      Additional configuration for Compliance Accelerator
  5. Provisioning users for SMTP Group or SMTP Mailbox Journaling
    1.  
      About SMTP provisioning groups
    2.  
      Adding an SMTP Group Journaling provisioning group
    3.  
      Adding an SMTP Mailbox Journaling provisioning group
    4.  
      Changing the order of the SMTP provisioning groups
    5.  
      Deleting an SMTP provisioning group
    6.  
      Adding or deleting an SMTP Provisioning task
    7.  
      SMTP Provisioning task summary reports
    8.  
      Configuring the SMTP site setting, Selective Journal Archiving
    9.  
      Adding SMTP target addresses manually
  6. Using the SMTP dashboard
    1.  
      About the SMTP dashboard
    2.  
      Using the Summary page
    3.  
      Using the Search page
    4.  
      Using the SMTP Archiving page
  7. PowerShell cmdlets
    1.  
      About the PowerShell cmdlets for SMTP Archiving
  8. Appendix A. Configuring target address rewriting
    1.  
      About target address rewriting
    2.  
      Steps to configure target address rewriting
    3.  
      Adding SMTP target addresses
    4.  
      Adding target address aliases

Configuring message tracking for SMTP messages

Enterprise Vault SMTP message tracking helps you to track the SMTP messages that the Enterprise Vault SMTP Service receives from remote messaging servers. You configure and enable SMTP message tracking for the site using the message tracking settings in the SMTP server properties.

To access the message tracking settings in the Enterprise Vault Administration Console:

  • Expand Targets.

  • Right-click SMTP and select Properties. The SMTP server properties window is displayed.

  • Click the Message Tracking tab to display the settings.

When you enable message tracking for the site, each Enterprise Vault SMTP server records details of each message that it receives. The SMTP server stores the message details in a message tracking log file. You can use the SMTP server log files for mail flow analysis, reporting, and troubleshooting. For example, you can compare the contents of the log files with the log file on the relay MTA to discover which messages were sent by the relay MTA but not received by an Enterprise Vault SMTP server.

Enterprise Vault generates a new message tracking log file every day. If the size of the file exceeds 10 MB, Enterprise Vault creates a new log file. The log file name format is EVSMTPMessageTracking_DNSAliasName_ yyyymmdd_n.log, where n is the incremental number that Enterprise Vault appends to the log file name if the log file size exceeds the 10-MB limit. For example, EVSMTPMessageTracking_EV.example.com_20170128_1.log.

The default location for the message tracking log file is Reports\SMTP\SMTPService in the Enterprise Vault program folder. You can change the location of the log file by editing the SMTP server properties in the Administration Console. Alternatively, you can use the cmdlet, Set-EVSMTPMessageTrackingLogLocation. In a Building Blocks environment, Enterprise Vault creates the log file in the message tracking log location on the active server and uses the name of the active server in the log file name.

Enterprise Vault assigns the Local System account and the local Administrators group full control on the folder that stores the message tracking log file.

You can configure the number of days to keep the log files on the server by editing the SMTP server properties in the Administration Console or using the Set-EVSMTPServerSettings cmdlet. Log files that are older than the specified number of days are deleted.

Table: Attributes in message tracking log describes the attributes in the message tracking log. The attributes in the log file are in comma-separated value (.csv) format, so that you can easily import the file contents into a spreadsheet.

Table: Attributes in message tracking log

Attribute

Description

unid

The unique ID of the message. This ID is unique to the message on each SMTP server.

qid

The ID of message in the SMTP message queue.

msgid

The Internet Message-ID of the message. This ID is present in the message header of each message that is stored in the SMTP holding folder.

subject

The subject line of the message.

mta

The name of the Message Transfer Agent (MTA) that sent the message to the SMTP server.

size

The size of the message, in bytes.

sender

The email address of the sender of the message as processed by the MTA.

submit-time

The time when the message is received by the SMTP server and placed in the SMTP holding folder.