You can configure the metadata streaming feature to export metadata for non-standard headers to your configured receivers. Examples of non-standard headers are X-BCC and X-Scan Incomplete.
To configure a receiver to export custom headers using the CLI:
Go to CLI configuration mode.
hostname # configure terminal
View the custom email headers that you have configured on your Email Security - Server appliance.
hostname (config) # show datastreaming email-options headers X-FireEye
Data Streaming Email Header Options: 1. X-FireEye
Define the custom email header to be exported to your metadata streaming receiver.
hostname (config) # datastreaming email-options header <header>
View the configuration for metadata streaming.
hostname (config) # show datastreaming email-options configuration
Data Streaming Email-Options configurations: Configuration Mapping Email Streaming : Enabled Email Retro Streaming : Enabled Email Mapping Property Name Property Key Enable date received-at True customer_id customer-id True
size size True to recipient True queueid queue-id True analysis_update_time analysis-update-time True messageid message-id True from_domain sender-domain True from sender True cc cc True bcc bcc True headers headers True from_header from-header True appliance_id appliance-id True type type True analysis_end_time analysis-complete-time True verdict verdict True subject subject True uuid uuid True status status True Object Mapping Property Name Property Key Enabled sha256 sha256 True size size True uuid uuid True name name True type type True md5sum md5sum True signature signature True verdict verdict True hostname (config) #