Quest MessageStats can search subject lines and message bodies for a particular string. Promodag can also do this, and I know Sirana AppAnalyzer can search subject lines.
You're right that this is a time-consuming process. For 100gb, you can expect at least an overnight process, because the application has to log on to each mailbox one by one and check each message. MessageStats has the ability to be more efficient with its data gathering by utilizing multiple gathering servers -- you need a main MessageStats server but you can install just the Task Execution components on other servers (like a file/print server that may be free overnight), so you can gather data from multiple Exchange servers simultaneously. I believe all these products have fully-functioning trial versions on their websites. Rob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aristotle Zoulas Sent: Thursday, August 23, 2007 10:10 AM To: Exchange Discussions Subject: RE: Email search Thanks, is there any forensic/other software available that is made for situations like this. How long do you think it would take exmerge to run on 3 databases spanning over 100GB? TIA -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Wednesday, August 22, 2007 1:18 PM To: Exchange Discussions Subject: RE: Email search Exmerge is the only way I know save writing my own script. Ed Crowley MCSE+Internet MVP Time Magazine's Person of the Year! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aristotle Zoulas Sent: Wednesday, August 22, 2007 9:55 AM To: Exchange Discussions Subject: Email search Hello, running Exchange 2003. For litigation purposes, we would like to search through the exchange databases for a particular string. This string could have appeared in the body or subject. What is the best way to do this? Exmerge? Is this the only way? Many Thanks Aristotle Zoulas _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
