My environment: Windows Server 2008 R2, Enterprise Vault 10.0.3, Journaling enabled.
I don't have a problem getting it working. The problem is that is appears to work too good. I'd like to filter out message the sender denied failure emails. The messages appear to be coming from MAILER-DAEMON@mycompany.com I enter the required registry entries and restart the journaling task and immediately start seeing messages flow to the deleted items folder as they should. The problem is that many of those messages aren't coming from MAILER-DEAMON and it legit email.
I enter the option below in SelectiveJournal_config.dat
exact:MAILER-DAEMON@mycompany.com
I've also tried:
cont:MAILER-DAEMON
This appears to do the same thing and start filtering legit email.
Does anyone have any experience with this? I only want to filter these failure messages