Skip to main content

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

INFO: What happens if I limit the number of days for data to be logged by MailMarshal?

Expand / Collapse


This article applies to:

  • MailMarshal (SEG)
  • MailMarshal ECM/MailMarshal Exchange

Question:

  • What happens if I limit the number of days for data to be logged in MailMarshal?  

Information:

You can reduce the size of your MailMarshal database by reducing the number of days that MailMarshal reporting data is retained in the database.

This will impact MailMarshal Reports and Console Mail History. For instance, if you reduced the number of days to hold data in the database to 60 days, then you can report on classifications for the last 60 days. In addition, the Mail History available in the Console will be limited to 60 days worth of data.  

Best practice is to retain enough logging data to allow reporting on several months of email traffic.

To change the retention period:

MailMarshal (SEG)
MailMarshal Exchange 7.X

  1. Open the MailMarshal Configurator or Management Console.
  2. Navigate to Array Properties.
  3. Select the Reporting item.
  4. The General Options section of the Reporting tab shows the length of time for which MailMarshal will retain logging data.
  5. To change the retention time, enter a number of days.

Notes:

  • In MailMarshal 6.X and above, and MailMarshal Exchange 7.X, if you archive messages for longer than the logging retention time, MailMarshal will retain basic database records about each archived message for as long as the archives are retained.
    • The retained information includes the sender, recipients, subject, date, size, and folder location. This information is necessary to allow viewing of the messages in the Console.
    • Any additional classification information will be deleted when the logging retention expires. 
    • You will be able to run some reports on the older archived messages. However, the available data is limited. For instance, the only "classifications" that will be shown are the names of the folders where the items are located.
  • For information about backing up and restoring messages in quarantine folders, see LevelBlue Knowledgebase article Q10220: How Do I Back Up and Restore Folder Contents in MailMarshal?.

 

This article was previously published as:
NETIQKB36480

To contact LevelBlue about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.