You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
50 lines
1.5 KiB
50 lines
1.5 KiB
<form version="1.1">
|
|
<label>Track a Message - Microsoft Exchange</label>
|
|
|
|
<fieldset autoRun="true" submitButton="true">
|
|
<input token="sender" type="text">
|
|
<label>Sender / From</label>
|
|
<prefix>sender="</prefix>
|
|
<suffix>"</suffix>
|
|
<default>*</default>
|
|
</input>
|
|
<input token="recipient" type="text">
|
|
<label>Recipient / To</label>
|
|
<prefix>recipient="</prefix>
|
|
<suffix>"</suffix>
|
|
<default>*</default>
|
|
</input>
|
|
<input token="subject" type="text">
|
|
<label>Message Subject</label>
|
|
<prefix>message_subject="</prefix>
|
|
<suffix>"</suffix>
|
|
<default>*</default>
|
|
</input>
|
|
<input type="time">
|
|
<default>Last 15 minutes</default>
|
|
</input>
|
|
</fieldset>
|
|
|
|
<row>
|
|
<table>
|
|
<title>Matching Messages</title>
|
|
<search>
|
|
<query>
|
|
eventtype=msexchange-msgtrack ($sender$ OR $recipient$ OR $subject$)
|
|
|transaction message_id keepevicted=t maxspan=15m
|
|
|search $sender$ $recipient$ $subject$
|
|
|eval dt=strftime(_time,"%c")
|
|
|`fix-sender-case`
|
|
|eval total_bytes=mvindex(total_bytes,-1)
|
|
|stats values(dt) as "Date/Time",values(sender) as "Sender",values(recipient) as "Recipients",values(message_subject) as "Subject",max(total_bytes) as "Size" by message_id
|
|
</query>
|
|
</search>
|
|
<option name="count">20</option>
|
|
<option name="rowNumbers">true</option>
|
|
<option name="showPager">true</option>
|
|
<drilldown>
|
|
<link>msgtrack_message?autoRun=true&form.message_id=$click.value$&earliest=$earliest$&latest=$latest$</link>
|
|
</drilldown>
|
|
</table>
|
|
</row>
|
|
</form> |