I have a site where EV 902 is being used for archiving both the Exchange 2010 Journal and mailboxes.

I see that as in many EV sites we have a significant amount of email messages being archived from the journal which are not required to be archived - i.e. system management messages originating from monitoring / management servers.  These make up a large amount of emails each day, and as they are not required for compliance purposes I want to delete them from the journal mailbox as opposed to moving them to the journal archive.

I have been looking through Chapter 14 - Configuring Filtering - and am confused as to how to best achieve this.

From looking at the documentation I would assume that Custom Filtering is what I need to implement, which would have rules to delete the specific emails (selected by sender in my case) and then by default archive all of the other email in the journal mailbox.  Am I correct here ?

Also, can anyone outline the steps and provide an example of any files required (filtering files).  I see that the requirement (I think) is to set specific registry entries and have rule files / custom properties files exist in the root of the EV installation folder.

AJ