Views:

Analyze your system security and tailor cloud application and service protection by querying and viewing log information.

Cloud Email and Collaboration Protection keeps detailed logs about security detection and system event data in the management console, such as advanced threat protection and data loss prevention scanning, quarantined messages, and activities affecting the management console. For details, see Log types.
The following table outlines the actions available on the Logs screen (Email and Collaboration Security OperationsCloud Email and Collaboration ProtectionLogs).
Action
Description
Perform a search
Analyze the security of your system by finding the specific log information you need.
Select a log type, specify criteria, and click Search to search for logs.
For details, see Searching logs.
View query history
Refer to the past queries and their query results.
Click View History to view a list of recent queries.
Clicking one of the query icons (search_log=GUID-5457BD04-B332-4623-92DB-FC0C621B74F6=en-us=.png or search_log_in_new_tab=GUID-6B746D5E-BEA2-4D61-A58B-4DD679DF9C6D=en-us=.png) displays the query result in the current console or a new browser tab.
View the log volume chart
Easily view the log volume trends and quickly identify spikes.
Click the chart icon (log_volume_visualization=GUID-3831CD34-AECF-4828-9A29-50B1D61E88D2=en-us=.png) to view a chart showing the number of log entries over the selected period of time.
Clicking on the bars displays the log volume for a more granular time period. You can view logs by month, day, or hour.
Manage log display
Adjust the log display according to your preference.
  • Sort the logs in ascending or descending order by clicking a column header.
    Note
    Note
    Sorting is not supported for certain columns, for example, Security Risk Name in the detection logs.
  • Hide a column by hovering over a column header, clicking the more options icon (logs_manage_more_options=GUID-23583993-66D0-40A6-BAE9-A39BA045029E=en-us=.png), and clicking Hide Column.
  • Click Manage Columns to:
    • Display or hide a column by selecting or clearing a column header.
    • Reorder columns by dragging column headers up or down, or clicking the go top icon (logs_manage_column_place_as_top=GUID-CC92FE78-4239-4F07-A1B3-B283BD119D90=en-us=.png) to place a column as the first.
Export logs
Analyze or share log data by exporting logs.
Click Export to export the current view or all logs into a .csv file.
You can export a maximum of 10,000 logs at a time.