Searching the log

Since the normal Current Events view in the Praetor administration MMC snap-in is a running log of all messages processed that is updated in real-time, it would be inconvenient to use this when searching for a particular message to review and release. The administration program provides a search capability that will query the database and generate a report based on specific event criteria and fields.

Upon selecting the event type in the right pane, you will be presented with a selection dialog with two different tabs, with the Event tab shown first to confirm that selection. The Message Date Range group box will be visible in either tab.

If you have message field criteria to query, press on the Fields tab to specify them.

Combined use of the event and the To recipient email address will quickly locate specific messages for your local user.

Note:

The field criteria uses a substring search so a partial entry (e.g. user name portion of the email address) may be sufficient.

Once you have specified the criteria, press to start the query. The report will appear as an additional node under the Find node in the left pane.

The node is named by your criteria using abbreviations for the events according to the following table:

Abbreviation	Action	Action Type
A	Accepted	Terminal
AP	Approved by user or administrator after review	Disposition
AR	Archived	Optional
F	Forward	Optional
N	Send a notification message to a specific address	Optional
NA	Send a notification message to the administrator	Optional
NR	Send a notification message to the recipients	Optional
NS	Send a notification message to the sender	Optional
Qu	Quarantined, unprocessed	Terminal
Qp	Quarantined, processed by user or administrator	Terminal
R	Rejected	Terminal
RD	Redirected	Terminal
RF	Refused by user or administrator after review	Disposition
RSO	Return to sender with original message	Terminal
RSS	Return to sender with summary	Terminal

Note:

The report generated by the Find command is static. It will not automatically update the list of entries in the right pane as new messages are received that match your specified criteria. You can, however, right-mouse click and select Refresh which will cause the query of the then-current database to be performed, as shown below.

Since the result of each query is static, any column can be sorted by pressing on its header title.

Modifying query reports

As a convenience Praetor administration MMC saves into memory the search criteria used to create the report node in the left pane. As long as this administration program is running, you can simply select the node and right-mouse click to select Modify query to change your criteria.

Upon selecting to modify the saved query, you will be presented with the Find By Event dialog box where you can choose between the Events and Fields tabs.

Removing query reports

To remove any report, highlight the node in the left pane and right-mouse click to select to remove it.

Refreshing query reports

If you selected a non-custom date criteria such as Today or Yesterday in the Find By Event dialog box, the query is a moving window which you can easily refresh with recent entries. Simply right-mouse click and select to refresh.