Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Return Total Emails Found in Exchange workflow

Log in to subscribe to topics and get notified when content changes.

Return Total Emails Found in Exchange workflow

The Security Incident Response - Return Total Emails Found in Exchange workflow returns the total number of threat emails found on the Exchange Server.

About this task

In the security incident, the Query Exchange button on the Exchange Search form triggers the workflow when the Query result is set to Return count.
Query Exchange Button
Workflow process activities include:
  • Runs a script to fetch a search query from all associated active search criteria records to run on the Exchange Server using the Search/Delete Threat Email in Exchange activity.
  • Creates an Exchange Search Results record as follows:
    Field Value
    Action Search
    Result type Count
    Email count Integer (total number of emails found)
    Search query Query text string runs on the Exchange Server
    Email date received N/A
    Email read status N/A
    Recipient N/A
    Search date Timestamp for when the workflow ran
  • Exchange search query results example
  • Log Message.
    Note: Any PowerShell script errors are recorded in the system logs.
Return Total Emails Found in Exchange workflow diagram
Feedback