Google Message Security for Google Apps Administration Guide - Manual (Page 376)

376 Message Security for Google Apps Administration Guide
Common Log Search Scenarios
The most common search scenarios are presented below. Each section presents
a list of the queries you’ll need, instructions for running the searches, and tips on
interpreting search results.
What happened to an inbound message?
Common answers include:
• The message was delivered to the recipient server.
• The message was quarantined or bounced by a filter.
• The sender connection may have been blocked by Connection Manager.
To track an inbound message, follow these steps:
1. From the Log Search tab, run the following query:
• Enter the sender’s email address in the From field.
• Select Inbound for the Direction.
• Select a time range that matches the time the message was sent.
• Click Search.
Note: You can narrow your search by also including the recipient’s email address,
the Sender MTA (IP address), and the Disposition in your query.