I do not want to journal the entire enterprise but however I have it setup it is indeed sending every single email from every single account within the organization to the journal mail account.
I created a Journal Rule (Organizational Config-Hub Transport-Journal rule) for each user amial account (10 users) and I want to capture ALL of their incoming and outgoing mail. I do not see where I have "enabled" journaling on the entire enterprise. My journal rule is this:
Send journal reports to email address is: email@example.com
Scope is: Global (I want incoming and outgoing)
Journal messages for recipient: firstname.lastname@example.org (user i want to capture)
These 10 accounts are within the same Admin database. I dont understand what setting is grabbing all 150 user accounts. I thought I had this working at one point but my database is growing huge because of this. Im sure its an easy fix Im just not seeing it.