System and method for analyzing and filtering journaled electronic mail

摘要

A system, method, and program for the processing of large amounts of email based on user-configurable criteria in close to real-time. The invention enables filtering of all journaled emails in an organization for the duration of a regulatory proceeding, or for audit purposes, thus greatly reducing the manual effort required to produce a targeted set of emails. The journaling feature copies all unique emails coming through the distributed email server farm to a smaller set of email mailboxes. The filtering application could run as a batch operation on each of those “journaling” mailboxes at periodic intervals or could run interactively. The user-defined filter criteria are applied to the emails filling up the “journaling” mailboxes, and matches are separated from the non-matches for analysis. The invention can be executed on offline data, such as personal message stores or individual compound message files.

主权项

1. A method, comprising:
identifying a plurality of electronic mail messages that require filtering; filtering the plurality of electronic mail messages via filtering criteria stored in a job configuration file; determining select electronic mail messages of the plurality of electronic mail messages that match a filter criteria responsive to the filtering; storing the select electronic mail messages in one of a plurality of electronic mail server mailboxes; loading a default job file via an electronic mail analyzer application; populating a job tab of an electronic mail analyzer user interface of the electronic mail analyzer application with data from the default job file; executing a loaded job as a batch operation on the plurality of electronic mail server mailboxes each comprising a plurality of the stored electronic mail messages wherein the loaded job comprises at least one rule to apply to the plurality of electronic mail messages; applying a corresponding predefined action to each select electronic mail message that matches the filter criteria, the predefined action being identified by the default job and the at least one rule; generating a report when a warning condition is met as a result of the job being executed and as a result of the filtering of the plurality of electronic mail messages; and writing and storing the report on at least one of a disk and an email.