| #

## Configuring a Mailbox Search

### Procedure

1. Go to Search & Destroy → Mailbox Search.
   The Mailbox Search screen appears.
2. Click New.
   The New Mailbox Search screen appears.
3. Type a Name for the mailbox search.
4. Specify the Keywords for ScanMail to locate.
   For details on searching for keywords, see Syntax Used for Keyword Strings.

   | ##### Note The maximum allowable character length of the Keywords field is 8192.

5. Specify the Mailboxes to search.

   | ##### Tip Trend Micro recommends selecting specific mailboxes for each mailbox search. Selecting to Search all mailboxes requires more system resources and could result in reduced performance.

6. Optionally configure the following additional search criteria:
   - Mailbox Components
   - Specific Senders or Recipients
   - Date
   - Discovery Mailbox
   For details on the search criteria, see Mailbox Search Criteria.
7. Click one of the following buttons:
   - Estimate Matches: Starts searching for the specified criteria. ScanMail returns an estimated count and an estimated size of the mailbox components that matched the search criteria.

     | ##### Tip Trend Micro recommends performing an estimated search before performing Search Now or Search Later. Copying large amounts of data to the discovery mailbox requires more system resources and could result in reduced performance.

   - Search Now: Starts searching for the specified criteria. ScanMail copies the mailbox components that match the search criteria to the specified discovery mailbox.
   - Search Later
     The Mailbox Search Schedule screen appears.
     1. Select the Time zone for the search to use.
     2. Specify the Date and time of the search.
     3. Click OK to schedule the search.
   - Save: Saves the search criteria options without searching the Exchange environment.
   - Cancel: Discards all changes.

   | ##### Note A mailbox search may take some time to complete. Administrators can continue using ScanMail and navigate away from the Search & Destroy feature without interrupting the search.

   After initiating or saving a mailbox search, the search appears in the table on the Mailbox Search screen.

Related information

- Modifying a Mailbox Search
- Deleting a Mailbox Search
- Viewing Mailbox Search Results