Answer

PROBLEM

GFI Archiver MailInsights reports may produce inconsistent results on emails whose group address cannot be expanded.

ENVIRONMENT

• GFI Archiver
• All supported environments

SOLUTION

This is by design, and is an expected behavior since GFI Archiver MailInsights is designed not to resolve users.

CAUSE

In GFI Archiver MailInsights the entity group does not refer to a group but to the collection of users which are members of that particular group. This means that when generating a report on a particular group, the actual group is not taken into account but the report runs on the summation of it’s members. This also means that the group’s email address is not utilized. 

Thus when an email is sent to a group with the group’s email address this email is not taken into account for the group. Similarly when an email is sent from a group email address, this email is not taken into account for the group.

For this reason emails which contain group email addresses can lead to inconsistencies between reports.