How does Enterprise Vault determine the DATE attribute associated with each Exchange item?
Each item archived by Enterprise Vault (EV) will have a series of possible dates that EV can use to create the DATE attribute. Depending on which attributes are stamped to the item will determine the DATE attribute.
Below is the list of possible properties that EV (as of version 8.02) will use for Exchange Messages archived via the Journal or Mailbox agent.
If the first attribute does not exist, the next attribute is tried and so on.
If none of the following attributes exist, the current time (Archive date) is used.
Note that prior to version 8.0 SP2, Enterprise Vault only looked at the following, in order but the fallback to the Archive date is the same.