Google Message Security for Google Apps Administration Guide - Manual (Page 329)

Reports 329
Traffic Activity Log (Outbound)
The Outbound Traffic logs show the detailed data for outgoing messages.
The logs contain data from 20 minutes prior. The timestamps are in PST. The log
contains a maximum of 5000 lines of data (the lines are tab-delimited.) Once the
size limit is reached, logging continues, with the oldest data deleted first. A
sample log entry looks like:
2007/11/07 10:13:21 IP:888.888.888.888 IPOrg:000000000
From:[email protected] User:999999999 Org:111111111
Recipients:[email protected] Header:760 Size:5616 Disposition:f
Subject:How’s the Weather?
Following are the descriptions of each field in the log.
The following logs are available:
Field Description
IP The IP of the outbound mail server transmitting the
message.
IP Org The org ID of the outbound email config.
From The sender address if there is one.
User The user ID of the user who sent the message, or 0 if
there is no associated user.
Org The org ID of the org which contains the user. If there is
no “From” address or no registered user, then this ID is
the same as the IP org.
Recipients All recipient addresses for the message.
Header The header length in bytes
Size The message size in bytes
Disposition The disposition of the message (f=forwarded,
q=quarantined, i=reinjected)
Subject The subject of the message sent.
Log Description
Outbound Traffic Log Data for the most-recent 24-hour period for the
selected org.
Outbound Traffic Log -
includes sub-orgs Data for the most-recent 24-hour period for the
selected org and its sub-orgs.