Searching Quarantine

  1. Go to Quarantine.
  2. From the Current organization drop-down list, select an organization to view the quarantine data of the organization or All organizations to view the aggregated data of all the organizations.
    Note: To view aggregated quarantine data of specific organizations, select All organizations and then specify the organizations from the facet area.
  3. Select the service to query from the Service drop-down list in the left-side area.
  4. Specify search criteria in either of the following ways.

    • Select facets from the left-side area.

      For more information on quarantine facets, see Quarantine Facets.

      Note:

      A maximum of 10 affected users can be displayed under Affected User.

    • Specify facets in the Search bar. This allows you to select one or several facets and specify keywords to query items on a more fine-grained level.

      Search criteria are described as follows:

      • Facets vary with each service you select.

      • The NOT logic is not supported.

      • Keywords are case insensitive.

      • Wildcards are not supported.

      • One facet can be selected for more than one time and specified with different keywords as necessary. The email messages or files that meet either keyword will be queried and displayed. When different facets are selected and specified, only the email messages or files that meet all the facets will be queried and displayed.

      • Partial matching is supported for non-time related facets. You can select a facet and type the first few letters of a keyword to query.

      • Only exact matching is supported for time-related facets. You need to type the time exactly in the MM DD, YYYY HH:MM format you see in the corresponding column.

        This includes Timestamp.

      • The All Fields facet supports querying Timestamp and all the other facets.

  5. Select a date range from the Select Date Range drop-down menu.
  6. Click Search.
Parent topic: Quarantine