Google Message Security for Google Apps Administration Guide - Manual (Page 361)

Message Log Search 361
Note: The “Message ID” is a unique number for the message security service
that identifies a specific message. It differs from the SMTP Message-ID,
which is often found in the message header.
To view more details about a specific message recipient, expand the row for
that recipient.
For descriptions and definitions for each of the fields in the search results, see
“Log Search Fields” on page 362.
For instructions on common search scenarios when using Log Search, see
“Common Log Search Scenarios” on page 376.
To build your own Log Search query:
1. Click More search criteria.
2. To specify a date range, select a range from the drop-down menu.
3. Enter search strings by clicking the Build my query check box and entering
keys with the following format, using commas or semi-colons to separate key-
value pairs.
From:[email protected],Disposition:delivered
4. Click Search to open the search results page.
You can also use AND, OR, or NOT to separate the key-value pairs. AND, OR,
and NOT are case-sensitive (must be typed with all-capital letters), and you must
insert a space both before and after. The to: and from: in your query are not
case-sensitive.
Note that you can run a query that combines NOT with AND; however, you cannot
run a query that combines NOT with OR.