Indexing additional email header info

[Paul_E]

I've been reading this thread linked below as its exactly what I need to do, however the tech note linked no longer exists.

Does anyone know if this is still possible ? I have a 365 day rolling journal I need if possible to get IP's from headers.

https://www-secure.symantec.com/connect/forums/indexing-additional-email-header-info

http://www.symantec.com/docs/HOWTO37039

Thanks

[AndrewB]

i see the original technote is no longer available. in the post, rob wilcox mentions an article he wrote about custom filters. maybe this is it? http://thingsilearnedtoday.net/2014/05/24/filtering-messages-journal-archiving-enterprise-vault/