I know there are options for the display fo the report but that is not what I am looking to do. I have a large volume (to me at least) of email to go through. I was hoping that someone knew of a way that when spamassassin (or the exchange event sink) can put at the top of the .out file the subject and the from address. Right now I am hand sorting my spam and ham and with about 4000 messages to go through its horrible to have to keep searching through the documents for the from and subject lines (they are never at the same spot in the doc). If all new mail has the data I am looking for at the top this would save a lot of time, see below:
Here is the top of a sanatized .out ham file Received: from mail12.zzzzz.com ([192.168.0.2]) by mail12.zzzzz.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 11 Feb 2005 17:01:42 -0500 Received: from usilms25.zzzzzzz.com ([192.168.0.3]) by usilms25.zzzzzzz.com with Microsoft SMTPSVC(5.0.2195.6713); Fri, 11 Feb 2005 16:59:10 -0500 Received: from usilms28.zzzzzzz.com ([192.168.0.1]) by usilms28.zzzzzzz.com with Microsoft SMTPSVC(5.0.2195.6713); Fri, 11 Feb 2005 16:59:07 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C51084.EA8F28B4" content-class: urn:content-classes:message Return-Path: <[EMAIL PROTECTED]> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.181 x-originalarrivaltime: 11 Feb 2005 21:59:07.0581 (UTC) FILETIME=[E8B4AED0:01C51084] Subject: FW: some email subject Date: Fri, 11 Feb 2005 16:59:10 -0500 Content-Transfer-Encoding: 7bit Message-ID: <[EMAIL PROTECTED]> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Confirmation Thread-Index: AcUQhOfgg7vR3cwySXCvI4FFEcj1UwAAADZh X-Priority: 1 Priority: Urgent Importance: high From: "Joe" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on mail.xxxxx.com X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE, PRIORITY_NO_NAME autolearn=no version=3.0.0 ########## here is what i want at the top of the file ########## From: "Joe" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: FW: some email subject Date: Fri, 11 Feb 2005 16:59:10 -0500 Any ideas?