Search Exchange Journal for Keywords

Posted on 2011-10-04
Last Modified: 2012-05-12
I need to search archived Exchange 2003 journaling stores for keywords.

I have reveiwed our current Journaling implementations (comparing settings to this link and this technet article) and our corporate journals seem to be configured very similar to the recommendations outlined.

As a result of limited space and large jorunaling databases, we routinely move journaling dbs to archival media and start a new journaling db.

I have three questions:

1. Mounting Archived Journals

 How would you recommend I mount these stored DBs - expressly concerning the fact these dbs have been relocated to archival storage (in this case, NAS units)?

2. Search Journals For Keywords

 How does one search journaling stores for keywords?  Is the a publishation on this on the www?

3. Filtering Search Results

 Does the search process allow one to filter to a date range(s)?  keywords within attachments?  wildcards?  multiple keywords in one search?
Question by:j9thomp
    LVL 17

    Accepted Solution

    1. You could restore your offline Journal DB over the current one and then use Outlook to connect and do the desired searches, however since your Journal DB is still currently active I don't think you want to do that because it would pretty much mess things up because new journal data would then flow into the old DB that you recovered to and...

    2. I suppose you could create a private replication of your current server and DC etc that is cordoned off/disconnect from your regular network and then you could recover the different point in time backups for the Journal DB and then search with Outlook.

    3. The Journal DB is basically one big mailbox so searching it takes a bit of time and like I said you can do most things with outlook

    4. Your best option would be to obtain a 3rd party utility that can mount offline databases with the ability to search for keywords, attachments etc.  Just do a search in Google for something like "Search Offline Exchange Journal Database"

    Author Comment

    Most of your suggestions were I was...thank you! is what I opted for.  ;)

    We use EAS to archive our email - including our journaling mailbox.  I opted to use EAS to search the journaling archive (all 2Tb of it - which include mail from journals that have been moved to archival locations).

    After searching for 60 keywords within 3 users journal results for a 9 month timeframe, I found 146 emails.  

    Thanks for the input...I remain interested in resolving the original questions - yet am certain that time vs. ROI is not significant.  
    LVL 17

    Expert Comment

    ok yes if you have a full blown archiving system and your Journal DB is just the interim point, i.e. assume all items sent received are journaled and then EAS extracts the data based upon your settings and stores it in the long time archive?  If so then yea you are best to search your actual EAS archive system since it should have all pertinent data.

    As far as how to do with the Journal databases my above suggestions are the way to make it happen and in your case if you have the time and resources you may want to create a recovery network that is disconnected from your live system so that you can rotate out the journaling EDB and search at will, but as you say you need to weigh the ROI vs time and resources and unless there is something I am missing it wouldn't seem prudent to do so since the EAS archive has what you need eh?
    LVL 17

    Expert Comment

    Thanks for the points as well :-)

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now