Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Description
eDiscovery Platform has the ability to export standard email header fields such as Followup-To, In-Reply-To, message-ID and Received. The following instructions can be used to properly export email headers. This document also contains information on how to read the export file.
Generating a standard email header export
- Before ingesting the first set of data, ensure the following case settings have been checked.
- Processing Menu > Settings
- Enable email header viewer
- Enable email header search
- Processing Menu > Settings

Note: If a previous source has been processed the options are grayed out and cannot be unchecked. A new case creation would need to be created.
- At the metadata export Options menu, check the following:
- Include custodian & location info
- Include email headers

Reviewing the email heading export
Email headers are exported in an XML file and not DAT/CSV file.
Below is an example of an export called allwithheader which contains results for files starting with that prefix.

Within the xml file, the email header fields can be found under that TagName called #Header as seen below:

Note: Not all emails have headers