Exchange 2007 Journaling query

[SirCam]

I am running Exchange 2007 SP1 with a global transport rule configured to journal all inbound and outbound email. The mailbox server is configured with Cluster Continuous Replication. There are no active users on the network at the moment.

Journaling is picking up a lot of test-flow emails generated by the Exchange servers to each other (sender is either "SystemMailbox{guid}" or "Exchange Server"). At the moment it is journaling 4 emails every 4 minutes. This is approx 1500 messages a day which we don't need to be journaling and then arvhiving (using Enterprise Vault to archive all messages).

Is there a way to maintain a global journal transport rule but not journal these system messages?

I do not see this activity in Exchange 2003.

Thanks,
Cam.

 

[ntinlin]

EV can't be set to ingest these messages but then dump them so that the journal gets emptied?

Neill

 

[SirCam]

I think it can by using a custom filter, but no idea how to set this up properly. I'd have to filter messages on the "SystemMailbox" sender, but not sure how to do this.