Data Protection - What is the ExternalID field used for?

Document ID : KB000013866
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

The Wgn3Event table contains captured events for all users. An event is a single object (eg, web page, email) captured from a monitored software package.

Question:

What is stored in the ExternalID field of the CA Data Protection (DataMinder) Wgn3Event database table?

Environment:
CA Data Protection (DataMinder)
Answer:

The ExternalID field of the Wgn3Event database table is used to store data associated with the following input types. 

1.  Mail Archives.

2.  Bloomberg mails. 

3.  Regular mails where the intervention action is not block. 

 

1.  Mail Archives.

The ExternalID field stores the archive type (ie EMC or SEV) along with the archive store instance (ie: 1234) and the eventID for example:

SEV:60F35D46AA12ABFF60C9B9C8708724C1$1225DB9AC2A2D9448BA726EA2B734CEE21110000593-tb-lion.tb3.com

 

2.  Bloomberg mails.

The ExternalID field stores the messageID for Bloomberg mails.  This is saved as it is without applying any hashing.

 

3.  Regular mails where the intervention action is not block.

The ExternalID field stores the messageID for regular mails (i.e. those processed via Exchange) as a converted MD5 hash presented as a string.  

Note: Where the mail has been sourced from an Exchange Journal the hash will be from the Journal hash and not the original message.

 

Additional Information:

For more information on the Wgn3Event table please refer to the product documentation.

 

Note: 

Orchestria, CA DLP and DataMinder are previous brand names for the product now known as CA Data Protection.