Spam emails have become an unfortunate reality for many businesses. To combat this issue and…
How to check Outgoing Log Search
You can filter on all outgoing messages received over the last 32 days using the thorough search tool known as the Outgoing Log Search. You can also access Quarantined messages, which are stored for 14 days.
How to access Outgoing Log Search
- Log in to the SpamBull admin center.
- In the left menu, expand the tab Outgoing.
- Click on Logs.
- The Query Rules panel allows you to customise your search filters.
- The classification link in the page description at the top of the log search displays the Classifications side-bar which shows more information on the classifications available.
Using the Log Search you can:
- Perform powerful filtering to find the results you need including:
- Filtering on message size and the From, To and CC headers.
- Filtering on the outgoing IP used for delivering or attempting to deliver the message and the location of the sending server (based on the IP address).
- Perform various actions on single or multiple messages.
- Customise available actions on specific messages.
- Regenerate the index to search all archived message content.
- Export archived messages.
- Create and email a report of your log search results (and schedule at a specified frequency).
How to use Timestamp shortcuts in the Query Rules Panel
The Query Rules panel allows you to customise your search filters. The default query rule for the Log Search is the Timestamp rule.
- Use the shortcuts beneath the Timestamp filter to quickly select results from Yesterday, the Last week and Last month.
- Click on the search button to see all incoming spam mails.
- Results are shown as a table below the search button.
In this example, the results from Yesterday are shown in the table. You can see that, as the timestamp of the emails are from yesterday’s date, at the time of writing this post.
How to run a Custom Log Search
Sometimes the Timestamp shortcuts are not sufficient for a search. Luckily, you can customise your own search filters in the Query Rules Panel.
- To search in the Query Rules panel, click on New rule.
Select from the filter options available:
- The part of the message/metadata you are looking for – Select from the first dropdown in the Query Rules panel.
- The type of match e.g. contains, does not start with etc. – Select from the second dropdown in the Query Rules panel.
- The content you are trying to match – Type in the field.
- To Match all rules specified ensure that All is selected. To allow partial matching, select Any.
- Click on the search button to see your results in a table.
In the example below we searched for mails containing the word undeliverable in the subject of the mail. The results shows a table of all the mails from the previous 2 weeks.
All query rule possibilities and types
| Message Part | Match Type | Content |
|---|---|---|
| Message ID | Contains | Text box; enter Message ID to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Admin | Child of | Text box; enter the Admin to search for and select from the drop-down |
| Domain | Equals | Text box; enter the domain to search for and select from the drop-down |
| Filtering Host | Contains | Text box; enter Filtering Host to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Timestamp | On | Date and time selector |
| Before | ||
| After | ||
| Between | ||
| Previous | ||
| Since last run | ||
| Sender | Contains | Text box; enter Sender address to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Recipient | Contains | Text box; enter Recipient address to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Sender Hostname | Contains | Text box; enter Sender Hostname to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Sender IP | Matches | Text box; enter Sender IP to search for |
| Contains | ||
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Sender Location | Is | Text box; begin typing a country to see a list of pre-populated locations or type: |
| Is Not | Anonymous Proxy | |
| Satellite provider | ||
| Bytes Received | Equals | Text box; enter number of bytes to search for |
| Does Not Equal | ||
| Greater Than | ||
| Less Than | ||
| Greater Than Or Equals | ||
| Less Than Or Equals | ||
| Bytes Sent | Equals | Text box; enter number of bytes to search for |
| Does Not Equal | ||
| Greater Than | ||
| Less Than | ||
| Greater Than Or Equals | ||
| Less Than Or Equals | ||
| Main Class | Is One Of | Text box; begin typing a message class or click to see a pre-populated list of suggestions split into: |
| Is Not One Of | Good Mail | |
| Matches | Not Spam | |
| Does Not Match | Allow listed | |
| False-positive | ||
| Bad Mail | ||
| Block listed | ||
| False-negative | ||
| Phish | ||
| Virus | ||
| Spam | ||
| Locked | ||
| Other | ||
| Greylist | ||
| Unsure | ||
| Unknown | ||
| Error | ||
| Sub Class | Contains | Text box; enter the Sub Class of a message to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Extra Class | Contains | Text box; enter Extra Class to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Greater Than | ||
| Less Than | ||
| Greater Than Or Equals | ||
| Less Than Or Equals | ||
| Error Class | Contains | Text box; enter Error Class to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| From | Contains | Text box; enter From address to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| To | Contains | Text box; enter To address to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| CC | Contains | Text box; enter CC addresses to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Subject | Contains | Text box; enter Subject to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Original Message ID | Contains | Text box; enter the Original Message ID to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Status | Is One Of | Text box; begin typing a message Status or click to see a pre-populated list of suggestions split into: |
| Is Not One Of | Accepted | |
| Matches | Auto Released | |
| Does Not Match | Blackholed | |
| Delivered | ||
| Delivery Failed | ||
| Quarantine Removed | ||
| Quarantine Expored | ||
| Quarantined | ||
| Queue Bounced | ||
| Bounced | ||
| Queue Expired | ||
| Queue Removed | ||
| Queued | ||
| Queued Frozen | ||
| Released | ||
| Not Accepted | ||
| Not Accepted | ||
| Rejected | ||
| Delivery Date | On | Date and time selector |
| Before | ||
| After | ||
| Between | ||
| Previous | ||
| Delivery IP | Matches | Text box; enter Delivery IP address to search for |
| Contains | ||
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Delivery Hostname | Contains | Text box; enter Delivery Hostname to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Delivery Port | Equals | Text box; enter Delivery Port to search for |
| Does Not Equal | ||
| Greater Than | ||
| Less Than | ||
| Greater Than Or Equals | ||
| Less Than Or Equals | ||
| Delivery Data | Contains | Text box; enter Delivery Data to search for |
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| Matches | ||
| Does Not Match | ||
| Delivery Interface | Matches | Text box; enter Delivery Interface to search for |
| Contains | ||
| Does Not Contain | ||
| Equals | ||
| Does Not Equal | ||
| Starts With | ||
| Ends With | ||
| In Archive | Yes | Selectable buttons: |
| No | Yes – Message is in archive | |
| No – Message is not in archive |
Related Posts
