[Viewing Event Log]

Hi,

 

I'm curretly required to get some information from the Intella Case Manager event log an am unable to do so. When i open the event.log located in "Intella\<Case>\audits\event.log" all I was given with was unstructured text.

 

Does it require any specific software to read the particualr log file?

 

 

["Unread" Column]

Hello,

 

The Unread column reflects whether the evidence data marks the item as unread. There are several caveats to be made here:

• If this property is not set, it could mean that the item has been read or that its read status is unknown - at the moment we don't distinguish between these two situations.
• At the moment this property is only available for mails in a PST or OST file and for some messages in a cellphone dump.
• Some tools allow the user to set a message back to "unread", so even when the flag is set, it cannot be said with certainty that the message is unread.

As for the previewed status: you mean previewed by the Intella user? This is reflected by the "Previewed" column and Features facet category. Note that there are also "Opened" and "Exported" categories.

Christian, thanks for the reply.

 

Regarding the previewed status, it's as what Adam mention.

["Unread" Column]

Hey there, 

 

Need some clarification on "Unread" Column. 

 

From my understanding, the "Unread" column will only flag out emails that are unread at the time of indexing. 

 

Is it safe to say that emails that were flagged are unread and email that were not flagged were read? Will this also be consistent across different email platform (LN, Outlook, etc.)?

 

Will there also be any indicator for email that are previewed but not open?

 

Thanks and Regards, 

Z.W