Viewing Search & Destroy Event Logs Parent topic

ScanMail records detailed event tracking logs for Search & Destroy. Because Search & Destroy allows administrators to view and delete Exchange components from users’ mailboxes, a comprehensive audit trail of Search & Destroy operations may be useful in case of user misunderstandings.

Procedure

  1. Go to Logs → Query.
    The Log Query screen appears.
  2. Specify the dates to search.
  3. In the Type drop-down, select Event Tracking.
  4. Select the user account(s) for ScanMail to locate and click Add.
  5. Select Search & Destroy logs beside Log type.
  6. From the drop-down beside Search & Destroy logs, select from the following events:
    • All
    • Configuration change
    • Operation
    • Task status change
  7. Optionally, type a description for the logs.
  8. Specify the Sort by and Display options.
  9. Click Display Logs.