Google Message Security for Google Apps Administration Guide - Manual (Page 380)

380 Message Security for Google Apps Administration Guide
However, to analyze filter settings and determine the cause of a message being
delivered or quarantined, you’ll need the Message Header Analyzer. The
message security service inserts custom tags into the message headers of
processed email. The Header Analyzer uses these tags to determine why a
message was quarantined or allowed through.
Troubleshoot Log Search
Why am I getting no results from my Log Search query?
Sometimes you may receive no results because your search criteria is too narrow,
In this case it may help to broaden your search by searching only by sender or
recipient plus time range. Also, if a message is not displayed in the search results,
the sender connection may have been blocked by Connection Manager. For more
details, see “What happened to an inbound message?” on page 376.
Why am I receiving an error message when I enter a Log Search query?
The maximum number of messages a Log Search query can return is
approximately 15,000. Queries that return more than this limit result in an error
message. If this occurs, you can refine your search by including additional criteria
-- for example, search by both sender and recipient.
In some cases you may also reduce the number of messages in the search
results by limiting your search to an organization that’s lower in the hierarchy.
I am receiving several pages of results from my Log Search query, but I can’t
find my message.
If this happens, refine your search criteria by including both the sender and
recipient in the query, as well as other criteria such as Sender MTA or
Disposition.
I’m unable to find any data for a specific user from two months ago.
Log Search data is available for approximately 45 days. To save data for a specific
user over a longer time period, be sure to export it to your computer occasionally.
Click Export All or Export Selected on the search results page.
I can’t see the Log Search tab in the Administration Console.
Your access to the Log Search tab depends on your authorization privileges.
Access to Log Search is granted initially only to administrators who have
View Reports privileges. For more information about Log Search privileges within
your organization, see “Administrative Privileges for Message Log Search” on
page 356.