4 Replies Latest reply on Dec 15, 2014 9:55 AM by Brad McGarr

    Event Log Reports Truncated

    mlfurgerson

      We have SaaS Email Security through our ISP (Windstream) which we have just started using about 2 months ago. We would like to get a weekly or monthly log of all inbound emails(accepted and rejected). Just meta-data, ie. To, From, Date/Time, Subject. The email contents are not needed.

      When we run the Event Log from the Reports tab, we seem to be getting only a small portion of the emails received.

      EG. I ran the report for All Events for November. We normally would get 1000's of spam for a one month span. However, the report brings back 675 emails, all denied.

      How do I get a report of all emails received during the previous month?

        • 1. Re: Event Log Reports Truncated
          frankm

          Why not run a message audit report?

          1 of 1 people found this helpful
          • 2. Re: Event Log Reports Truncated
            kwidhalm

            Hello mlfurgerson,

             

            franm is correct, you should be able to get what you are looking for via Message Audit.  If you do not see the Message Audit option (under your Email Protection) please contact your support team and request that it be enabled for your account.

             

            Karen Widhalm

            System Support Specialist

            SaaS Email and Web Security

            McAfee. Part of Intel Security.

            • 3. Re: Event Log Reports Truncated
              mlfurgerson

              Running a Message Audit Report only returns 1000 results.

              I get the message:

              "Notice: Search yields too many records; displaying first 1000 messages. Please narrow your search to see all results."

              • 4. Re: Event Log Reports Truncated
                Brad McGarr

                mlfurgerson,

                 

                The online display of Message Audit Results is limited to the first 1000 results of the timeframe requested. Downloading the results will usually bring an additional 100-200+ results over the 1,000, but we recommend narrowing the search results further to ensure you're getting all available results. This may include using smaller timeframes.

                 

                Bradly McGarr, Security+, MCP, MTA-Windows OS, CIW-WFA, A+

                Intel Security

                McAfee SaaS Email & Web Security Technical Support Technician

                1 of 1 people found this helpful