Transport-level audits use information that is gathered through the Default Gathering task. You select the information to be gathered using specific audit property tabs in the Exchange organization properties. You can specify audit information for auditing mailboxes, Internet sites, and delivery times for messages.
You can audit user mailboxes for email usage by adding mailboxes to the mailbox audit list on the Exchange organization property page. Mailbox auditing allows you to track the sending and receiving of email messages, intended targets, and subject line text.
Due to the way that Microsoft Exchange writes information to the tracking logs, the Mailbox Audit reports display the recipients list as it is created by the mailbox user. Any distribution groups that are included in the recipients list are not expanded to include all members of the distribution group. If the mailbox that is being audited receives a message that was sent to a distribution group, the received messages list does not show that the message was sent to a distribution group instead of directly to the mailbox.
You can create a list of Internet domains that are considered restricted by your email usage policy. MessageStats can audit all tracking logs to identify email traffic to or from the specified domains. If you want more than one Exchange organization to audit for a particular Internet domain, you must configure each Exchange organization individually.
Many email viruses have similar text that appears in the message subject line. Being able to see the volume of messages that are sent and received with these subject lines is beneficial in understanding the impact that email viruses can have on an Exchange organization.
In Microsoft Exchange, you must specifically select the Enabled subject logging and display option on the Exchange server to include message subjects in an audit. If you do not select this option, the subjects for the audited messages is empty.
You can use message delivery time auditing to identify messages that take an unusual amount of time to be delivered. When a message takes longer to deliver than the audit threshold that you define, MessageStats records the message originator, recipients, subject, messageID, timestamp, and size.
MessageStats provides content and attachment audits for mailboxes. You can audit the count and volume information for the items in the mailbox databases on the selected server. You must create a gathering task to collect the content and attachment details from the mailboxes.
MessageStats can gather mailbox content and attachment information for public folders through audits. You can audit the count and volume information for the items in the public folder database of a selected server.
After you run the dependent gathering tasks, you can use the Content Analysis Audit reports to review the audited information. Public Folder Content Analysis Audit reports include the following reports:
Audits affect the overall size of your database, as well as affecting gathering performance time. It is recommended that you carefully select the audits that you want to perform, rather than auditing large amounts of information in your organization.
Before you define audits, consider the amount of data to be added to the database. You can contact Professional Services to help determine the growth rate of your database based on your MessageStats configuration.
If you change the configuration settings for audits, MessageStats automatically reimports the tracking logs that already exist or have existed in the database. During the gathering processes, MessageStats determines if any logs must be imported again.
NOTE: For more information, see .
Mailboxes that you want to audit must exist in the MessageStats database. If you want to audit a mailbox that does not currently exist in the database, you must enter the internal mailbox identification information (including the Name, Display Name, Legacy Distinguished Name, and the Email Address) into the Add New Mailbox to Audit dialog box.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center