Make it possible to search subject in Message trace
Can we have a feature in message trace of Admin center to allow us search email by their subjects
Anonymous
shared this idea
17 comments
-
Malcolm Matheson
commented
Searching by subject is essential when determining the scope of an email that may be malicious. We need to know not only who received that email, but who may have forwarded it to someone else.
-
Charles R.
commented
With the new spamming ability to forge the From line even more than before, it can be difficult to find all recepients of a spam that can list as From each user, and often from multiple IPs and sending servers.
Searching by Subject line would make finding these 100 times easier -
Chandrashekar Kollipara
commented
This is such a big need not having subject based search is hard
-
Johnathan
commented
Enterprise customers need to be able to Message Trace by searching Subjects.
We get hit by spam and phishing campaigns daily, and when they get past MS Quarantine and spam filters, we need to see how many people got them, and what all addresses sent them. Botnets are a thing. Spam and phishing campaigns are a thing.Limiting searches to only sender / recipient addresses only helps for correspondence that you are already aware of.
When updating all of your admin portals, Compliance Centers, ECP, etc., etc., please add the ability to search by Subject to Message Trace!
-
Jonathan
commented
It's astonishing to me that this wasn't available from day 1. As others have noted here, this has been available in Exchange for years, so why it would be left out of Exchange Online baffles me. There are many cases where I have a subject but no message ID and the issue is I'm trying to determine who received it, so I don't know the sender or recipient. I search for emails by subject far more often than any other value, so I'm sure other administrators do, as well. I have worked around this by running a wider search for all emails to several email addresses or from several addresses and then filtering the results, but this is tedious. Now I'm in a situation where I have to search going back 90 days and might hit the limits of Start-HistoricalSearch because I can't limit the search by Subject. It's absurd! Please add this feature. Thank you!
-
Anonymous
commented
How is this still not a thing?! You could do this in our old Exchange 2010 server, why not Exchange Online?!
-
Kevin
commented
Why not look up the mesageID of the message from the headers and use that to search?
Or, you could also use the Content Search feature in Security and Compliance Center, though I think that was released since the posting of this suggestion -
Anonymous
commented
pls think about this advice
-
kcallewier
commented
had in issue last week where recipients claimed not having received a particular mail which was sent with "Send As" permission. Putting the message ID of that particular mail in the Exchange Online (extented) message trace tool, did not return any information. Message Tracing is a vital tracing tool for IT administrators on which we must rely for 200%. Message trace search on subject should be implemented with high priority!
-
ssaglauskas
commented
Messages that are SPAM are sometimes received, and it is necessary to check how many users have been redirected, and it is useful to search by subject.
-
Anonymous
commented
It is mandatory for admin to trace the email with email subject.
-
ebarlow
commented
This is something that we struggle with on a daily basis. When addressing incoming phishing campaigns the sender address is generally not the same for all incoming emails, but the subject line is. It would be extremely helpful to be able to search for a subject line value when looking for these types of messages.
-
Bill H
commented
Phishing e-mails frequently come from many different sending IDs and are sent to many IDs, so searching for the subject will allow for a complete list of all e-mails of the same attack.
-
Nitin Jaiswal
commented
The Message Trace option should also have the ability to perform a search with the "Subject" of the email.
-
Anonymous
commented
i do agree. this is a important feature and must need.
-
tanveer
commented
While using Start-HistoricalSearch , we are asked "You must specify at least a message ID, a sender, or a recipient." . Though these are said to be Optional : https://technet.microsoft.com/en-us/library/dn621132(v=exchg.150).aspx
-
tanveer
commented
We do cannot trace emails based on Subject , specially when we are dealing with SPAM emails that got delivered to almost all users