Google vault - Expunge just the messages that users have already deleted - issue

[TwistedHelixis]

Hi, I wanted to set any messages that have been sent to the users bin so they get properly deleted after 1 year using Vault.

 

I selected 'Create Rule' 'Email', '365' days days from when the message was sent, and then select 'Expunge just the messages that users have already deleted'.

 

The issue is, when I then select preview to see which emails will get covered by this retention rule it is listing emails sent / received today in the list.

 

This is a screenshot of my settings.

 

[TwistedHelixis]

Would someone test this out on their domain for me.

 

Send an email to another users in your domain, create a new email rule using my settings above but do not apply them. click preview and let me know if it lists the email you just sent in the list of affected emails covered by the rule.

 

If you could then delete the email to the bin and do those steps again.

 

Does it list the email sent?

 

Thanks

[jthompson]

The preview is not showing you what would be expunged, it's showing you what messages the retention rule will be run against. If the scope of the rule is your root organisation and you have no particular search terms or date ranges entered, then the preview will show you every single email. If you add a search term to your rule (e.g. from:[email protected]) and then run the preview again, you'll see the results change accordingly. It doesn't mean that it's wanting to expunge all of those messages, just that they will be subject to that rule.

[TwistedHelixis]

So it includes the Conditions & Duration part of the 'Create a custom retention rule' page but not the Action after expiration.

This makes no sense, I already know which emails will be covered as I have just selected this in the bits above, the bit I do need to know is what emails will be effected by the actual action as I have no way of knowing what all the users have actually sent to their bins.

 

EDIT - BTW thanks for letting me know how it works :0)

Edited June 5, 2019 by TwistedHelixis

[jthompson]

It kinda makes sense in that the rule is about what you're going to retain, not what you're not going to retain.

 

I guess you could check for what emails would be in line for deletion by creating a new matter in Vault with the same search criteria but adding label:^deleted.