Managing archived email

You can archive email according to criteria you specify. For details, see Email archiving workflow.

You can view and search archived email through the web UI, and through IMAP using the email archiving administrator account. You can also download them, forward them to an email address, and use them to train the Bayesian databases.

For more information on Bayesian database training, see Training the Bayesian databases.

To access this part of the web UI, your administrator account’s:

• Domain must be System
• access profile must have Read-Write permission to the Others category

For details, see About administrator account permissions and domains.

To view archived email

1. Go to Monitor > Archive > Archive Account.
2. Select the email archive account you want to view and click View. For details about email archive accounts, see Configuring email archiving accounts.
3. From the Archive Folder drop-down list, select Inbox to view the good mail mailboxes, or select Bulk to view the spam mailboxes.
4. Double-click the name of the email archive mailbox that you want to view.

A list of archived email appears.

GUI item	Description
View (button)	To view the message, click its check box and click View. You can also view the message by double-clicking the message.
Send (button)	Select the check box of each email that you want to send to an email address as a mailbox (.mbox) file, then click this button.
Export (button)	Select the check box of email that you want to download and click Export to download a mailbox (.mbox) file or an archive (.tar.gz) file containing individual email (.eml) files.
Train Bayesian Database (button)	Mark the check box of each email message to use to train Bayesian databases then click this button. For more information, see To train Bayesian databases with archived mail.
Back (button)	Click to return to the list of archive mailboxes.

To train Bayesian databases with archived mail

1. Go to Monitor > Archive > Archive Account.
2. Select the email archive account you want to view and click View. For details about email archive accounts, see Configuring email archiving accounts.
3. From the Archive Folder drop-down list, select Inbox to view the good mail mailboxes, or select Bulk to view the spam mailboxes.
4. Double-click the name of the email archive mailbox that you want to use to train the Bayesian databases.
5. In the check box column, mark the check box of each email that you want to use to train the Bayesian databases. To use all messages for training, select the check box above the first message to mark the check boxes of all email on the current page.
6. Click Train Bayesian Database.
7. Select whether to use the messages as spam or non-spam (known as innocent messages) email.
8. Select the database you want to train: global or per-domain (group).

• Global requires no further information.
• For per-domain database training, select the domain.

Click Apply.

Searching the archived email

You can search the email archive for email messages based on their contents, senders, recipients, and time frames.

You can search archived email in both the current mailbox and rotated mailboxes, whether email is archived on the local disk or remote host. However, you can view only the archived email on the local disk.

The search action involves two steps:

• Create a search task, where you can specify search criteria.
• Execute the search and view the results.

See below for detailed instructions.

To search the email archives

1. Go to Monitor > Archive > Archive Account.
2. Select the email archive account you want to search and click View. For details about email archive accounts, see Configuring email archiving accounts.
3. From the Archive Folder drop-down list, select Inbox to search the good mail mailboxes, or select Bulk to search the spam mailboxes.
4. Click Search button.

A new tab called Archived Email Search appears, displaying all search tasks if there are any.

5. Click New to add a search task.
6. Configure the search criteria. Note that for time range, the end time is excluded. For exmaple, if you specify a time range from 2018/10/03 to 2018/10/09, archives dated October 9, 2018 will not be included in the search.
7. Click Create to execute and save the task. The task name is the time when the task is created. The Archived Email Search tab displays the search tasks and their search status as follows:

• Done: The FortiMail unit has finished the search. Click View Search Result to see the search results.
• Pending: The search task is in the waiting list.
• Running: The search task is still running. Click Stop to pause the search.
• Stopped: The search task has stopped. Click Resume to restart the task.