Sampling Searches in Compliance Accelerator show more hits than expected
Article ID: 100019637
Updated On:
Description
Error Message
No error is presented.
IMPORTANT: Do not edit this content
Moved from the Solution section due to the product versions noted being long out of support.
To determine the percentages of each message type set for each Monitored Employee within a Department, using CA 6.0, 7.0 or 2007:
1. In the Compliance Accelerator home page, click on the Department name in the Department Administration column.
2. In the Department home page, click Monitored Employees.
3. In the Monitored Employees page, click the Effective policy radio button to display the effective percentages for each message type for each Monitored Employee.
Adjust the percentages for each message type in the Parent Department, Child Department and/or for each Monitored Employee to reflect the desired percentages. If no Random Sampling messages are desired, set all message type percentages to 0.
Cause
This can occur if the Parent Department, Child Departments and/or the individual Monitored Employees are not configured correctly for Random Sampling percentages. For example, if all Child Departments are configured with 0% on all message types, but the Parent Department is configured with 5% for all message types, the result will be that each Child Department will have 5% of each message type returned for each Monitored Employee during the Random Sampling processing. This also applies to Guaranteed Sample Searches.
For Child Departments with 0% values for each message type, the Parent Department's percentages will override the Child Department's percentages, as long as the individual Monitored Employee's percentages are not higher than the Parent Department's percentages. If the Monitored Employee's percentages are higher than the Parent Department's percentages, with the Child Department's percentages set to 0%, the Monitored Employee's percentages will override the Parent and Child Department's percentages.
Note: CA honors the highest percentage for each message type across Child Department percentages, Parent Department percentages and individual Monitored Employee's percentages.
For example:
1. The Parent Department has the sampling percentage for Microsoft Exchange Server Internal set to 2%.
2. A Child Department has the sampling percentage for Microsoft Exchange Server Internal set to 0%.
3. A Monitored Employee has the sampling percentage for Microsoft Exchange Server Internal set to 5%.
The Effective Monitoring Percentage for this Monitored Employee for Microsoft Exchange Server Internal will be 5% as this is the highest percentage set between the Parent Department, Child Department and that Monitored Employee.
Resolution
To confirm the Random Sampling configuration is adding more items to the Review Sets than expected, open a Review Set of all messages for any Child Department. Scroll to the right in the Message Listing Pane (left) to view the Capture method column, or click on any message and go to the History Tab in the Preview Pane (right) to view the Capture method: line contents. If messages have the Capture method of Random Sampling, then the Random Sampling percentages of the Parent Department, Child Department or individual Monitored Employees may need to be adjusted.
To determine the percentages of each message type set for each Monitored Employee within a Department:
1. Open the CA Client using an account with proper permissions to the Department to be checked (i.e., having the built-in User Admin role assignment).
2. Click on the Departments tab.
3. Select the name of the Department in the left filter panel.
4. Click on the Monitored Employees tab above the right Summary panel.
5. Click the Show effective monitoring policy tab.
6. Review the page that will be displayed to confirm the effective percentages to be applied for each message type/direction against each Monitored Employee.
7. Click the Close button at the bottom of the page to return to the Monitored Employees summary panel.
Adjust the percentages for each message type in the Parent Department, Child Department and/or for each Monitored Employee to reflect the desired percentages. If no Random Sampling messages are desired, set all message type percentages to 0.
Issue/Introduction
Random Sampling or Guaranteed Sample Searches show more hits than expected when using Child Departments or Monitored Employee percentage overrides.
Compliance Accelerator (CA) Random Sampling and/or Guaranteed Sample Searches show more hits in the Review Set than expected when using Child Departments, or when the Monitored Employees message type monitoring percentages are set to lower values than the Child and/or Parent Department.
Was this article helpful?
Yes
No
Powered by
