03-09-2020 06:30 AM
Hello All,
Need help with setting up Custom Filtering in EV12.
I've created REG keys;
Created "Default Filter Rules.xml" as Unicode;
<?xml version="1.0"?>
<RULE_SET xmlns="x-schema:ruleset schema.xdr">
<RULE NAME="FLRNotify" ACTION="MOVE_DELETED_ITEMS">
<AUTHOR>
<DISPN>user@gtlaw.com</DISPN>
</AUTHOR>
</RULE>
</RULE_SET>
Restarted Journaling task, I do not get Event 45329. Journaling is acting like the filter does not exsist.
Any ideas, what am I missing?
03-09-2020 07:56 AM - edited 03-09-2020 07:57 AM
Your registry entry is backwords, the Name should be 1 with a value of EnterpriseVault.CustomFilter.
I would recommend to also set the Override and MoveOnFilterFailure keys.
If you later change the rule action, you can temporarily set the value to 1. Setting this value forces the Exchange Journaling task to reprocess any messages in the journal mailbox.
This entry controls whether the Exchange Journaling task moves messages to the folder Failed External Filter
when an unhandled error occurs in the external filter. This folder is automatically created when required in the journal mailbox.
If the MoveOnFilterFailure registry entry does not exist then, when an unhandled error occurs in the external filter, the Exchange Journaling task moves the associated messages to the Enterprise Vault Journaling Service\Invalid Journal Report
folder in the journal mailbox.
03-09-2020 08:01 AM
Haha, good catch. Thank you Tony.
03-10-2020 11:37 AM
Everything looks good, but I'm still seeing messages Journaled. What did I miss?
<?xml version="1.0"?>
<RULE_SET xmlns="x-schema:ruleset schema.xdr">
<RULE NAME="Exclude" ACTION="HARD_DELETE">
<AUTHOR>
<EA>user@gtlaw.com</EA>
<EA>user1@gtlaw.com</EA>
</AUTHOR>
</RULE>
</RULE_SET>
03-10-2020 12:44 PM
Looks like you might be missing a bit:
<?xml version="1.0"?>
<RULE_SET xmlns="x-schema:ruleset schema.xdr">
<RULE NAME="Exclude" ACTION="HARD_DELETE">
<AUTHOR INCLUDES="ANY'>
<EA>user@gtlaw.com</EA>
<EA>user1@gtlaw.com</EA>
</AUTHOR>
</RULE>
</RULE_SET>