Exchange 2010 Transport Rule Subject Search String in EMC

Trying to figure out how to get my transport rules to work on subject search strings correctly.  Here is an example.

Current subject filter search string:

Thank you for your case! Case#

Because I'm trying to filter and redirect the following subject emails:

Thank you for your case! Case#:233321 - Blahblahblah

However I also catch

RE: Thank you for your case! Case#:233321 - Blahblahblah
and
FW: Thank you for your case! Case#:233321 - Blahblahblah

I tried figuring this out but the transport rule is so important, any interruption was cause an armed insurrection.
OasisEEAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jose Gabriel Ortega CastroCEOCommented:
I already worked with this kind of attacks so This would be my query just fix the start and end time.

$Exported=@()
$Subject = "Thank you for your case! Case"
Get-MessageTrackingLog -Server Mail -Start "07/01/2016 00:00:00" -End "07/25/2016 23:59:59" -MessageSubject  "$Subject"  | where{ $_.Directionality  -eq "Incoming" -and $_.OriginalClientIp -ne ""} | select ComputerName,Timestamp,ClientIp,ClientHostname,ServerIp,Sender,Directionality,OriginalClientIp |  foreach{ $temp = New-Object PSObject -property @{ OriginalClientIp = $_.OriginalClientIp};  $exported+=$temp}
$exported

Open in new window


You will get all the information in the $exported var, from there you can do whatever ( | convertto-json file.json)  (export-csv -notypeinformation here.csv), ( |convertto-html file.html) etc.

ex:
$exported |export-csv -notypeinformation here.csv

Open in new window

0
OasisEEAuthor Commented:
Jose, thank you for answering so quickly.  However this is not a message search.  I am trying to edit a Transport Rule and regular expressions are kinda kickin my ass trying to figure it out.

https://technet.microsoft.com/en-us/library/aa997187%28v=exchg.141%29.aspx?f=255&MSPPError=-2147217396
0
RoninCommented:
Have you tried using server-side mailbox rule for that?
Check options available in New-InboxRule.
Unless you want this to be addressed PRIOR message hitting the mailbox.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

OasisEEAuthor Commented:
Unfortunately it has to be PRIOR to hitting the mailbox.  Trust me, i would of loved to use simple server-side mailbox rules.
0
RoninCommented:
How about this one? Would that work?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RoninCommented:
Answer provided
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.