Skip to main content
My preferencesSign out
Proofpoint, Inc.

What information does the Log Details button provide?

Situation

You are searching for a specific email or want additional details for a specific email such as scan information, delivery status, etc. You need to understand the technical detail of an email in the message logs on the Essentials console

Solution See below for information on how to access the Log details and a brief explanation of the information available.

 

Log Details

The following items are shown when the details tab, in the email logs, is clicked. To access these details:

  1. Navigate to Logs > All Users.
  2. In the far right Actions column, click Detail.

log details.png

Below are details about the information available in the log's Detail view:

Permalink: This link helps support to quickly navigate to the email you have a question about.

General Description:

  • Envelop Sender - Where the message originated from.
  • From Header - Where the message said it was from.
  • Subject -  Subject of the message.
  • Timestamp - When the message was passed through essentials.
  • Message ID - Helpful for troubleshooting back-end logs.

Scan Information:

  • Virus Summary - Tells you if the message was infected or not.
  • Spam Summary - Tells you if we think this message is spam or not.

Per-Recipient Classification & Delivery Status:

  • Recipient - Tells you who the message is going to.
  • Classification - This field shows what type of email Proofpoint Essentials considers the email to be. These may be Spam, Clean or Filtered. In this example, a filter is in place to always allow emails from this sender, so we see ‘Filtered: Allow’.
  • Triggering Filter - If a filter has been triggered, as in this example, you will see the filter rule which has been triggered.
  • Delivery - This field shows us delivery information for this email. As we can see, the Delivery Status is ‘Delivered’. Note the ‘Last delivery response’ at the end of this field. Of importance is the response code 250 (highlighted) from the receiving server, whose IP address is displayed in square brackets to the left. This indicates it has accepted the email from the Essentials platform. At this point, if you have not received an email that you believe you should have and see this status in the email log, it indicates that the issue causing non-delivery lies with the recipient server and should be investigated at that point, Proofpoint Essentials has successfully delivered the email to the specified receiving server.
  • Released - Whether this email has been released from a Quarantine.
  • Reported - Whether this email has been reported as spam by the recipient.

Other Information:  

  • Client IP Address - Originating IP address.
  • Client GeoIP Lookup - Message's originating country.
  • Email Size - Size of the message.
  • Encrypted - (Outbound Only) Indicates that this message got encrypted by Proofpoint Encryption. (This does not indicate if the message was sent out TLS)