Knowledgebase
Review Message Logs

Viewing the Logs

When you log into the Essentials interface, the email logs screen can be easily accessed by selecting the Logs tab on the top navigation.

  • As an organization administrator you can select the Users/Groups/Functional Accounts tabs to search logs by any of these account types. Simply clicking on the logs link next to the specific account.
  • You can also choose the License tab to search logs for all active accounts of any type in the organization.

The default settings will display (as below) on the log search form, ‘Inbound mail’ for ‘Today and Yesterday’ which has been ‘Quarantined’. So in order to view any emails that have been quarantined for the current day simply click the search button.

From the Log Search form you can additionally change the dropdown settings for Type, Received and Status, to perform a more specific search for the messages you wish to view.

Search Log Refinement

Note: The search is limited to 1,000 results. If your message is not present within these results you should refine your search criteria a little further by using the other options available, From, To, Subject as shown in the image.

To release one or more emails from quarantine and deliver them to your email address, simply complete the following steps:

  1. Run the quarantine search from the log search form (default settings). On the Search Results window, select the check box in front of each email that you want to release.
  2. Click the Actions Drop down list and select Release From Quarantine then click Apply.

The emails released will then appear in your inbox in the next minute.

Reviewing the logs is a powerful and useful tool. This is a starting point to help both you and support to look into issues.

  1. Login to your administrative URL
    1. https://eu1.proofpointessentials.com
    2. https://us1.proofpointessentials.com
    3. https://us2.proofpointessentials.com
    4. https://us3.proofpointessentials.com
    5. https://us4.proofpointessentials.com
  2. Presuming this is an issue with an end-user, go to the Users & Groups section.
  3. If you do not see the user from the immediate list, search for the user in the search field.
  4. On the line of the specific user, press the "Logs" link.
  5. Refine your search to find a specific email you want to be reviewed.
    1. Type: This is for Inbound to your user or Outbound email your user sent
    2. Received: Adjust this to your best estimate of the time frame you are looking at
    3. Status: This is where the message currently resides. If absolutely unsure, try to use ANY if you input the following fields
    4. FROM: This is the sender address
    5. TO: This is the recipient address
    6. Subject: key words found in the message subject
  6. Hitting search will apply the parameters to look for the email. If there are no results, review the search parameters.
    1. You can adjust the search limit per page, up to 1000 results. 

Once you locate a message(s), you can do the following:

1. Check the box next to the message(s).  Then select the options drop down in header area.

  • Release from quarantine
  • Release and approve
  • Classify as spam
  • Classify as clean
  • Report as false positive
  • Report as false negative
  • Hide email from logs
  • Show email in logs

Logs - Actions Page

2. Select the 'Details' button on the right of the message

  • Copy a permalink to send to support or others so they can link straight to the message details.
  • Report as False Positive / Negative as appropriate
  • Link to specific filters / safe senders items that the message triggered.
  • See more detailed information about the message including delivery status, spam scores etc.

Logs Details Page



Attachments 
 
(7 vote(s))
This article was helpful
This article was not helpful

Comments (0)