Emails are not getting marked by any Analytics Rule using recipient information.

book

Article ID: 100045712

calendar_today

Updated On:

Description

Error Message

 

Cause

Enterprise Vault (EV) Discovery Accelerator (DA) has an Analytics feature that can be enabled on any DA Case.  This feature can automatically apply marks on items based on specific criteria, such as author or recipient email address.  When Analytics is enabled on a DA Case, the initial processing is to capture a copy of each message that is in the Case's Review Set and parse their information into various tables that are created within the DA Customer database. The information in each message that is parsed includes author and recipient information found within each message.

If any recipient is part of a Journal Report from Exchange 2003, the Analytics parsing will not find the recipient as it will not be in the To, Cc or Bcc field.  When a recipient is not present, the SQL indexing that is part of the Analytics process will not be able to add that recipient to the table containing all authors and recipients of the message being processed.  The DA Customer database table used to contain all message contacts for all messages within the Case is tblContacts_#, where the # is replaced by the CaseID of the DA case.  For each message, all contacts are referenced in the tblIntItemContacts_# table, again where the # is replaced by the CaseID.

To determine if a specific Analytics processed message has a specific recipient, a SQL Query will need to be run against the DA Customer database.   Information needed for the query includes the CaseID and DiscoveredItemID of the message in question.   The CaseID can be obtained by hovering the mouse over the name of any search within the case to see a pop-up balloon appear with the SearchID and CaseID.  The DiscoveredItemID is displayed in the upper right of the Review tab's review pane when the message is selected in the middle List View pane.

Run the following SQL Query against the DA Customer database to list all contact (author and recipients) for a specific message with their Display Name if available and their Email (SMTP) Address if available.  Replace DACustomer01 with the name of the DA Customer database.  Replace all instances of the number 5 with the CaseID of the Analytics enabled DA Case.  Replace the number 1 in the last line with the DiscoveredItemID value.

USE DACustomer01;
GO

SELECT tiic.ContactID
     , tc.DisplayName
     , tc.EmailAddress
FROM tblIntItemContacts_5 AS tiic
JOIN tblContacts_5 AS tc ON tiic.ContactID = tc.ContactID
WHERE DiscoveredItemID = 1;

If the recipient is not listed in the query output, it was not in the To, Cc or Bcc fields of the message when ingested into the Analytics tables.

For more information about how EV works with the data in Exchange 2003 Journal Recipients, refer to Article 100030800.

 

Resolution

A workaround to this is:

  1. Run a new DA search with the option selected to include items already in review within the Case to find items sent to the specific recipient.  This will search the EV index volumes of the Archive(s) in which the messages reside and return the messages as EV indexes messages differently that SQL Analytics.
  2. Accept the search results in the Case's Review Set.
  3. In the Review tab with the Case selected,
    1. expand the Search option,
    2. select the above search,
    3. click the Apply button.  This will filter the Review Set to show only those items from that search.
  4. In the List View (middle) pane,
    1. select all of the items (click the top message,scroll to the bottom of the pane and select the last item while holding down the Shift key),
    2. click the appropriate mark button to apply the tag.
  5. Repeat Step 4 for any additional pages of items from the search.

 

Issue/Introduction

Analytics Rules using recipient information are not marking items for known recipients.