Saving a message attached to an incident to disk

Messages attached to incidents may contain confidential data. To ensure confidentiality, the fact of the message attached to the incident being saved to disk is logged on the Security Server. Contact the administrator for additional information.

To save the message attached to an incident to disk:

1. In the Management Console tree, select the Incidents node.

   A table with a list of incidents appears in the workspace.

2. Select an incident in the list. Click the View button or select the View item in the context menu of the incident.

   The Incident details window with detailed information about the selected incident opens.

3. Click the Actions button on the right from the Subject field and select Save message.

   The Save as dialog appears.

4. Specify the destination folder where you want to save the message and click Save.

The attached message is saved in the destination folder as an EML file.

The following event is logged in the Windows Event Log on the Security Server: "Level=Warning; Source=KSCM8; Event ID=16012", with the following text: Security officer attempted to save the message attached to the incident to disk.

Due to specifics of Microsoft Exchange server encoding, the content of messages saved to disk is sometimes displayed incorrectly in the email client. To read the message text without misrepresented encoding, we recommend that you send the message attached to the incident to your email address and then view this message in your email client.

Page top