Outgoing Log Search

The Outgoing > Log Search works in the same way as the Incoming Log Search but logs all outgoing messages over the past 32 days. This feature is available from the Admin Level, Domain level and Email level Control Panels, from Outgoing > Logs.

Quarantined messages are stored for 60 days, but for messages older than 32 days these will not be visible on the log search page. They can be found using one of the prions from SIEM Logging Integrations or using IMAP.

Using the Log Search you can:

Click on the classification link in the page description at the top of the log search to display the Classifications side-bar which shows more information on the classifications available:

Actions Available on Log Search Results

In the Search Results listed you can carry out a variety of actions.

Actions Available for Message Statuses

Key

The following icons indicate the action's availability per message status:

Key Status Description
Available The action is available for all messages with this status
Available if additional criteria met The action is available for any message with this status, so long as an additional criteria is met (see * for additional information)
Not Available The action is not available for any message with this status
Incoming
  Allow/Block Troubleshoot Continuity Quarantine Management Archiving
Status/Action Add allow list filtering rule Add block list filtering rule Add sender to allow list Block recipient Block sender Block sender and remove from quarantine Change action for messages like this Delivery issue log Download quarantined message Export as .CSV Recipient callout Remove from queue and notify sender Retry delivery from queue Sender callout Telnet SMTP test Compose Reply Download queued message Remove from queue View email Release from quarantine Release from quarantine Release and train from quarantine Remove from queue and train as spam Train as spam Delete archived message Export message from archive Redeliver archived message
auto-released * * * *
blackholed * * * *
bounced * * * *
delivered * * * *
delivery-failed * * * *
not-accepted
quarantined
quarantine-expired
quarantine-removed
queued * * *
queue-frozen * * *
queue-bounced * * * *
queue-removed * * * *
queue-expired * * * *
rejected
released * * * *

Some actions may not be available for Email Level Users.

Outgoing
  Allow/Block Troubleshoot Continuity Quarantine Management Archiving Identity Management
Status/Action Add allow list filtering rule Add block list filtering rule Add sender to allow list Block recipient Block sender Block sender and remove from quarantine Change action for messages like this Audit Log Delivery issue log Download quarantined message Export as .CSV Recipient callout Remove from queue and notify sender Retry delivery from queue Sender callout Telnet SMTP test Compose Reply Download queued message Remove from queue View email Release from quarantine Release from quarantine Release and train from quarantine Remove from queue and train as spam Train as spam Delete archived message Export message from archive Redeliver archived message Add and configure identity Lock identity Lock user
auto-released * * * * * *
blackholed * * *
bounced * * *
delivered * * *
delivery-failed * * *
not-accepted * *
quarantined * *
quarantine-expired * *
quarantine-removed * *
queued * * * * *
queue-frozen * * * * *
queue-bounced * * * * * *
queue-removed * * * * * *
queue-expired * * * * * *
rejected * *
released * * * * * *
secure-delivered * * * * * *

Some actions may not be available for Email Level Users.

Regenerate Archive Message Content Index

This is only to search within the Archived message body content. This is not needed for searching message metadata.

This process may take some time to complete.

If you want to be able to search all Incoming or Outgoing archived message content in your domain, click on the Regenerate Content Index button at the top of the Domain Level Log Search page. This is controlled by the Indexing Options section in the Archive Settings page at Domain Level only.

The index is regenerated and any messages archived since the last time the index was generated are added to the index - allowing you to search all archived message content for that domain.