These search filters only apply to the Integrated (VM) package.
Boolean search queries can be used when searching for mails under the Operations -> Activity -> History and queue page. It's implemented using three[1] logical operators; and, or and not. The and operator have precedence over or, and is implicit if not specified.
The following query therefore means "true if just condition match, or both condition2 and condition3 matches". Each condition has to be an comparison equivalent.
condition or condition2 condition3
The following comparison operator are available.
| Operator | Type | Example | Description |
| = | Equal | from=support@halon.se | Requires an equal match |
| ~ | Like | from~support | Requires support to be found in the from field |
| ~ | Like | from~support% | Requires the from field to begin with support |
| ~ | Like | from~%@halon.se | Requires the from field to end with @halon.se |
| > | Greater | time>0 | Requires time to be greater than 0 |
| >= | Greater or equal | time>=10 | Requires time to be greater or equal to 10 |
| < | Less | time<10 | Requires time to be less than 10 |
| <= | Less or equal | time<=10 | Requires time to be less or equal to 10 |
| not | Not equal | not from=support@halon.se | Requires an negative match |
The following fields are available.
| Field | Type | Example | Description |
| messageid | string | messageid=b70a2fea-683a-11e1-91e4-000c294da5fc:32 | Searches for the message ID |
| queue | ACTIVE, DEFER, HOLD | queue=DEFER | Searches for the messages in different queues |
| queueid | number | queueid=10003 | Searches for the queue id |
| historyid | number | historyid=1234 | Searches for the history id (log row) |
| actionid | number | actionid=1 | Searches for the action id |
| jobid | string | jobid=customer1 | Searches for message with jobid customer1 |
| server | string | server=1 | Searches for message arriving on mailserver with ID 1 |
| transport | string | transport=1 | Searches for message sent to mailtransport with ID 1 |
| from | string | from=support@halon.se | Searches for message from support@halon.se |
| senderdomain | string | senderdomain=halon.se | Searches for senderdomain to halon.se |
| senderlocalpart | string | senderlocalpart=support | Searches for senderlocalpart to support |
| to | string | to=support@halon.se | Searches for message to support@halon.se |
| recipientdomain | string | recipientdomain=halon.se | Searches for recipientdomain to halon.se |
| recipientlocalpart | string | recipientlocalpart=support | Searches for recipientlocalpart to support |
| ip | string | ip=1.2.3.4 | Searches for message from the IP 1.2.3.4 |
| helo | string | helo=smtp.example.com | Searches for the message sent with HELO/EHLO "smtp.example.com" |
| sasl | string | sasl=john.doe | Searches for the message sent by SASL username "john.doe" |
| subject | string | subject~test | Searches for the message containing "test" |
| rawsubject | string | rawsubject~test | Searches for the message containing "test" without decoding |
| action | QUARANTINE, DELIVER, DELETE, BOUNCE, REJECT, DEFER, ERROR | action=BOUNCE | Searches for messages that has failed delivery (outbound) |
| time | unix timestamp (UTC) | time>1332235771 | Searches for messages received after Tue Mar 20 10:29:31 CET 2012 |
| age | seconds | time>300 | Searches for messages older than 5 minutes |
| quarantine | string | quarantine=1 | Limit search to one particular quarantine (only for queues) |
| rpdscore | number | rpdscore=spam | Searches for messages with RPD inbound score (support both textual and numeric scores) |
| rpdrefid | string | rpdrefid~str=000... | Searches for messages with RPD inbound refid |
| rpdoscore | number | rpdoscore=spam | Searches for messages with RPD outbound score (support both textual and numeric scores) |
| rpdorefid | string | rpdorefid~str=000... | Searches for messages with RPD outbound refid |
| sascore | number | sascore>5 | Searches for messages with SA score |
| retry | number | retry=0 | Searches for messages in queue with specific retry count, delayed delivery in this case |
| retryts | unix timestamp (UTC) | retryts>1332235771 | Searches for messages with a next retry timestamp after Tue Mar 20 10:29:31 CET 2012. There is a special value of "now" available to represent the curren time. |
| retrydelay | seconds | time<300 | Searches for messages with a retry delay off less than 5 minutes |
| size | number | size>1M | Searches for messages larger than 1 MiB (in bytes). Both "K" and "M" suffixes are supported |
| metadata.* | string | metadata.foo=bar | Searches for messages with metadata key foo and value bar |
The following alias fields are available.
| Alias | Field |
| serverid | server |
| sender | from |
| recipient | to |
| transportid | transport |
On the Operations > Activity > History and queue page, there are time input fields, in which you may specify the start and end time within the capabilities of PHP's strtotime function. They are available due to the fact that a time query may otherwise be very inconvenient to use.
Examples
Search for messages from or to halon.se.
from~%@halon.se or to~%@halon.se
Footnotes and references
[1] Regardless of and and or operator precedence, it's possible add different and grouped match groups with the && operator, in order to enforce a specific pre-condition; for example to restrict all searches from/to a specific domain.
Comments
0 comments
Article is closed for comments.