Demo Buy

Reviewing the audit log

An administrator sees the history of important actions in the organization on the Audit log screen of SmartMail Management: creating and deleting mailboxes, granting access, blocklist and allowlist rules, quarantine, bulk move, approved sending and settings changes. Each row shows who performed the action and when.

  • Administrator with permission to read the audit log

How to review the audit log?

The administrator sees the history of important operations in the organization in the Audit log screen of SmartMail Management: creating and deleting mailboxes, granting access, black and white list rules, quarantine, bulk move, approved sending and settings changes. Who can do this: Administrator with permission to read the audit log. Each row states who performed the operation and when.

Steps

  1. Open Audit log from the left menu. The newest actions are at the top.

  2. To see only organization-wide rule and permission changes, click Policy changes; for actions affecting many emails at once, click Bulk actions 1. To return to all, select All events.

  3. In the row, read the name of the action 2, the person who performed it 3 and its date 4. For bulk actions, it also states how many emails were affected.

  4. For older records, click Older records at the end of the list.

Audit log: filter buttons and, on each row, event, actor, target and date
  1. 1Filter records
  2. 2What was done
  3. 3Who did it
  4. 4When
Audit log, with demo data.
TipFor automatic actions such as auto-quarantine, the actor is shown as System. The coloured bar indicates the severity of the action: organization-wide rule and permission changes and deletion actions are highlighted separately.

Related pages