I have an email policy to detect for a list of values. The values are one from column 1, immediately following by one from column 2. For example:
Col1 Col2
alpha one
beta two
gamma three
The easiest way was to create an EDM with all the possible variations. For example:
alpha one
alpha two
alpha three
etc
The resulting list is ~64,000 lines which is fine for an EDM.
Now, I need to recreate this policy for endpoint. However, I can't use the EDM for endpoint. The list is too large to add to a keyword list as it gets truncated when pasting.
I tried to use keywords with proximity, but that's to working. When I test with:
alpha onebeta twogamma threeIt detects "alpha one", "one beta", "beta two", "two gamma" etc. and I end up with 5 incidents instead of 3.
Is there any way to prevent the policy from detecting the second value on the next line?
Any other ideas or anything I'm missing?
Thank you!