Deployment Guide › Event Import › Importing from Archives › Filtering Email Import Operations › Filtering by User Attributes

Filtering by User Attributes

If required, you can configure import jobs to exclude or only include e‑mails associated with CA DLP users who have specific account attributes. For example, if your CA DLP user accounts include a ‘Country’ attribute, you can configure import jobs to only import e‑mails sent by or to users in a specific country.

The import filter is defined in the machine policy of the Event Import host machine, where the User Filter policy setting defines a lookup expression containing one or more True or False tests that relate to a single CA DLP user attribute (for example, a user's team or country). Find this setting in the E-mail User Identification folder.

Event Import uses address mapping to associate each event participant, via an email address, with a CA DLP user. It then evaluates the lookup expression for that user.

• If all the users fail the test (in each case, the command evaluates to False), the email is not imported.

  Note: If the relevant user attribute is blank or not defined for any user, that user is deemed to have failed the test.

• If any user passes the test (the command evaluates to True), or any participant cannot be mapped to a CA DLP user (because no corresponding CA DLP user exists), the event is imported.

The expression syntax is:

<uservar><operator><text>

where:

<uservar>

Specifies the name of the user attribute you want to test against.

<operator>

Determines whether the value specified by <text> must be present or absent.

<text>

Represents the attribute value whose presence or absence you want to test. Values are not case-sensitive; use double-quotes if the value includes spaces.

Filter expressions leverage the existing User Attribute data lookup functionality. For full details about <uservar>, <operator> and <text>, see the Administration console online help; search the index for ‘userattr commands, data lookup’.

For example, to exclude all emails associated with users based in your organization's UK office:

1. Customize the CA DLP user attributes for your organization so that the ‘Country’ attribute specifies where the user is based.
2. In the machine policy for the host machine, specify this expression in the User Filter setting:

   country is not uk
   

3. Any user whose ‘Country’ attribute is not ‘UK’ will fail the test (the expression evaluates to False).

More information:

Address Mapping Procedure