Applying labels to emails in Advanced ECA search

Last published : Jun 07, 2026
To apply labels to emails in Advanced ECA search
  1. On the Investigations tab, selectManaged Accounts>Advanced ECA.
  2. Select the Advanced ECA search in which you want to filter the records and apply labels to the required emails within the search.
The search result opens in the right pane.
  1. Set the filter options and click Apply to view the filtered items.
  2. On the Emails tab, select the emails to which you want to apply labels.
    Note: Before you apply labels to the items, you can view the previously applied labels of the items in the preview pane.
  3. On the action menu, click Label.
  4. In the Add/Remove Labels dialog box, select the labels you want to apply to the emails.
You can clear the labels if these are not required anymore. In case you have selected multiple emails the Add/Remove Labels dialog box shows applied level status as follows:
  • The check box that is not selected yet means this label is not at all applied to the selected emails.
  • The check box with the dash mark means the label is applied to some of the selected emails, but not applied to all the selected emails.
  • The check box with the tick mark means the label is applied to all the selected emails.
  1. Select the required labels, and click Apply Changes.
After you apply labels to the emails, these labeled emails are available under the respective labels under the labels node.
  1. To ensure if the label is applied to the emails, select the emails, and expand the Labels section to view its details in the right pane.