Below is the example of an email message. Each message includes a message header (marked by red) and a message body (marked by green). The message header consists of header fields. Field names are marked by bold. Other data containing in these fields are field values. In our example the message header has 4 fields: From, To, Content-Type and Subject. But the header can include other fields too.

From: Mail Delivery Subsystem <postmaster@primenet.com>
To: <example@example.com>
Content-Type: text/plain
Subject: Returned mail: User unknown
Auto-Submitted: auto-generated (failure)

The original message was received at Mon, 4 Nov 2002 06:45:11 -0700 (MST)
from postmaster@localhost

   ----- The following addresses had permanent fatal errors -----
<test@primenet.com>
(expanded from: <test@primenet.com>)

   ----- Transcript of session follows -----
... while talking to smtp-local.primenet.com.:
>>> RCPT To:<test@primenet.com>
<<< 550 <test@primenet.com>... User unknown
550 <test@primenet.com>... User unknown

To filter incoming messages by a message header or message body, select Header/Body menu from the Filters list. The appropriate window will be displayed.

Select Header Field - click the black down arrow to select a header field or message body from the drop down list. Or, you can type a header field which is not listed in the menu by yourself.

String or Regular Expression - type a text or regular expression that the selected header field or message body must contain. A regular expression is a string of characters which tells the searcher which string (or strings) you are looking for.

You can learn more about regular expressions here

Click Add. The specified conditions will be automatically added to the table.

If you click the right mouse button on the selected string from the table, you will display the popup menu with the following options:

Match Case - select Yes if you want the program to recognize all the capital letters in your text.

Whole String - select Yes if you want the program to search for the header field that contains the exact text only. For example, you type subscribe and set Yes in the 'Whole string', the program will catch emails only with the subscribe word in the message header/body. Emails with the unsubscribe word will be skipped. If you set No in the 'Whole srting', both subscribe and unsubscribe words are caught.

Contain Word - select Yes if you want the program to find the messages which contain the specified text in the header field or message body. If you type No, the program will search for the messages which do not contain the specified text in the header field or message body.

Regular Expression - select Yes if the text you specified for searching is a regular expression.

To edit a selected string, click Edit.

To delete a selected string from the table, click Delete.

To select all strings from the table, click Select All.

There are the following options you can check:

Field matches all of the words below - check this option if you want the program to find messages that contain ALL of the specified words/expressions in the header field or message body. I.e. the filter by header/body is executed on AND criteria.

Field matches any of the words below - check this option if you want the program to find messages that contain ANY of the specified words in the header field or message body. I.e. the filter by header/body is executed on OR criteria.

The yellow field below the window will display you a full description of your settings.

If you click Body Filter Settings tab, you will be able to specify additional settings to filter your messages by the specified text in the message body.

Search in XX first lines of message body - here you can indicate the number of strings from a message body to apply the filter.

Note:

Test Regular Expression tab allows you to check if the specified regular expression matches the source text, i.e. whether you correctly created a regular expression you want the program to search for in the specified text.

Type a regular expression in the appropriate window. Enter the text that this regular expression must match in the Source window and click Match. To find the next regular expression that matches the specified mask, click Match Next. The Result window will show you the searching results.