Modifying a Mailbox Search Parent topic

ScanMail allows administrators to modify the search criteria for a mailbox search even after the search completes. If a search returns a large number of results, administrators may want to narrow the scope of the search to obtain more accurate results.
WARNING
WARNING
Modifying the search criteria of a search that has already completed automatically deletes any of the original search results stored in the Exchange discovery mailbox and the ScanMail database.

Procedure

  1. Click Search & Destroy → Mailbox Search.
  2. Click the Name of the search to modify.
    The View Mailbox Search screen appears.
  3. Select Allow changes to the search criteria.
    ScanMail unlocks all of the search criteria fields for editing.
  4. Modify the necessary settings.
    For details on refining keyword strings, see Syntax Used for Keyword Strings. For details on search criteria options, see Mailbox Search Criteria.
  5. Click one of the following buttons:
    • Estimate Matches: Starts searching for the specified criteria. ScanMail returns an estimated count and an estimated size of the mailbox components that matched the search criteria.
      Tip
      Tip
      Trend Micro recommends performing an estimated search before performing Search Now or Search Later. Copying large amounts of data to the discovery mailbox requires more system resources and could result in reduced performance.
    • Search Now: Starts searching for the specified criteria. ScanMail copies the mailbox components that match the search criteria to the specified discovery mailbox.
    • Search Later
      The Mailbox Search Schedule screen appears.
      1. Select the Time zone for the search to use.
      2. Specify the Date and time of the search.
      3. Click OK to schedule the search.
    • Save: Saves the search criteria options without searching the Exchange environment.
    • Cancel: Discards all changes.
    Note
    Note
    A mailbox search may take some time to complete. Administrators can continue using ScanMail and navigate away from the Search & Destroy feature without interrupting the search.
    After initiating or saving a mailbox search, the search appears in the table on the Mailbox Search screen.