M1070 - Message tracking (Unable to get Export All)

[pbabu6001]

Hi,

This is regards to Message tracking from Management server. I am entering the sender, time range and after clicking on "Export All" button then I will be able to see only 24 to 25 thousands of rows data only. Is there any solution to increase the rows, so that it will be easy to extract the report? Thank you so much!!

[dmccabej]

Hello,

The 'Export All' button will export up to a maximum of 50,000 results. If you need to view additional items, I would suggest decreasing your time range and performing multiple exports. Regarding adding any further information to the export, I am not aware of any current features to allow that.

Thanks!

-Dennis M.

[pbabu6001]

Dennis, thanks for your response.

I am able to export up to a maximum of 25,000 results at a time and I need to export more than 50,000 results at a time. Could you please let me know on why I am unable to export up to 50,000 results?

[dmccabej]

Hello,

Can I ask what version of ASyncOS you're using on the SMA? You can see this using the 'version' command from the CLI or also on the logon page from the GUI. It's possible that you may be on an older build which does not support the 50k limit.

Thanks!

-Dennis M.

[pbabu6001]

Hi Dennis,

SMA - 9.6.0-051

[Libin Varghese]

Hi,

As of AsyncOS 8.1, when exporting tracking results, the release notes state that you can export up to 50,000 entries.

When running the tracking query, the SMA is asking the underlying database (Splunk) for about 50,000 results. However, email may be represented as multiple results in Splunk. For example, if a MID is rewritten due to message modification, this will be two results in the Splunk, but only one event in the exported .CSV file. While we do ask for 50,000 results from the database, there is no guarantee that this will actually be 50,000 emails in the exported .CSV file.

Thanks

Libin Varghese

[pbabu6001]

Thank you so much Libin

[dmccabej]

Looks like Libin gave you some great information as well. :)

Let us know if you have any other questions!

-Dennis M.

[pbabu6001]

Actually it haven't resolved my issue.

Thanks for coming back again.

[dmccabej]

Hello,

Are you able to export more than 25,000 if you decrease the time range? (IE: If you perform 2 exports instead of 1 export)

If not, it's quite possible the SMA simply doesn't have the data you're looking for or that there's only around 25,000 entries total for the time range you're searching.

Thanks

-Dennis M.

[pbabu6001]

I am looking for 24 hours data at a time, but it is giving only 6hours data with 25,000 results.

[dmccabej]

You may want to try increasing the time range and/or using a custom range greater than 24 hours. 

If that's still not working you can always open up a support ticket if you need us to take a closer look.

Thanks!

-Dennis M.

[pbabu6001]

I have raised a support ticket SR681401551 and waiting for TAC person to reach me.

[pbabu6001]

Hi Dennis,

Can I open multiple tabs in a browser and Export all on all the multiple tabs as below?

Tab 1- 00:00 to 06:00

Tab 2- 06:01 to 12:00

Tab 3- 12:01 to 18:00

Tab 4- 18:01 to 23:59

Is there any conflict when taking the results?

[dmccabej]

Hello,

There shouldn't be any conflicts as far as I'm aware. Although, you may want to stick to one tab as multiple simultaneous tracking searches and exports could cause a performance impact. It will take a little while longer but is probably the safer route.

Thanks!

-Dennis M.