Lucky H Posted June 23, 2023 Report Posted June 23, 2023 Greetings, all. The specific goal is to locate all e-mails that were sent to external recipients; thus, I thought NOT agent in combination with specific Options selections would remove all exchanges containing an internal e-mail address in any of the recipient fields, but this approach did not work at all. My understanding is that the query NOT agent:*@domain_not_wanted.xxx should exclude all e-mails with a @domain_not_wanted.xxx e-mail address. However, the query is actually pulling all items with a @domain_not_wanted.xxx e-mail address in any of the address fields (To, Cc, etc.). I also tried to be more specific and used agent:*@domain_wanted.xxx AND NOT agent:*@domain_not_wanted.xxx. This brought all items with either @domain_wanted.xxx or @domain_not_wanted.xxx e-mail addresses. Using Options to select only address fields did not alter the result. Any pointers are greatly appreciated. Quote
Alex Posted June 26, 2023 Report Posted June 26, 2023 Hello, Please note that the NOT operator cannot be used without a positive assertion ('a NOT b', but not 'NOT b'). So the first example should not work. The second query is syntactically correct (though AND is redundant here). We need more information and possibly, sample data to be able to reproduce and diagnose the issue. I suggest to open a support ticket on the Intella support portal: https://support.vound-software.com Quote
Jacques B Posted July 3, 2023 Report Posted July 3, 2023 If you are looking simply to exclude all @domain_not_wanted.xxx, you could drop the NOT from the query, show all items under Features facet, and then use the Exclude option with the query: agent:@domain_not_wanted.xxx It's not a single step as you may have been trying to do. But it will produce the results you want. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.