IronPort C150 - Regular Expression

[tickbarros]

Hi guys,

i need a help to retrieve mail information, i want search mail_logs from sender <mickey@disney.com> to recipient <wolverine@marvel.com>

and the next step is filtring for subject "travels" for example.

I try to create the regex below:

grep -e "From: <mickey@disney.com> | -e "to: <wolverine@marvel.com>" | -e "Subject 'trav.*'" mail_logs

but is not display.

please, help me to understand the syntax e see the administration guide for GREP COMMAND, but not help me.

[viahmed]

Hi Patrick,

Please follow the link to our knowledge base article below which provides detailed instructions.

How do I use the command grep? How can I determine the disposition of a message using the mail logs?

http://tinyurl.com/jb7z4

Hope this helps!

Regards,

Viquar

Customer Support Engineer

[tickbarros]

hi viahmed,

thanks to help me, but the information not display

i read the document and i type the correct syntax ( i believe)

my Async OS is 7.0

i use the findevent command below

>findevent -i -f "mickey@disney.com | -t  wolverine@marvel.com" mail_logs

>findevent -i "-f mickey@disney.com | -t wolverine@marvel.com" mail_logs

>findevent -i -f "mickey@disney.com" | -t "wolverine@marvel.com" mail_logs

>findevent -i -f "(mickey@disney.com | -t wolverine@marvel.com)" mail_logs

and cannot retrieve the mail message...

please, if i type the incorrect command syntax, help me.

Thanks.

[Christopher Smith]

Patrick

What are you seeing when you run this? an error or no results?  If you use findevent to just search for one parameter does it display any results?

find event -i -f "micky@disney.com" mail_logs

Keep in mind that mail_logs does not hold data for an indefinite period of time.

Christopher C Smith

CSE
Cisco IronPort Customer Support