Message Tracking

This article contains information on using Mimecast's Message Tracking feature to search, refine, and manage email message details, including search methods, customizable views, and advanced filtering options for efficient email tracking and troubleshooting.

Message Tracking allows administrators to search across multiple queues (see below) using specific message information. The results provide information on a message's processing and current state (e.g., if it was subjected to greylisting but subsequently accepted and archived). This is useful for troubleshooting message delivery, such as when a user inquires why a message didn't arrive or was delayed (either inbound or outbound).

If an Ad Blocker is enabled on your web browser, make an exception for the Mimecast Administration Console URL or disable the Ad Blocker to always view search results.

Message Tracking offers two methods of searching for messages:

• • • Search by Data: This is the default method and is better suited for search requests where only certain message details are known.
    • Search by ID: This method is better suited for a more targeted search where specific message details are known.

The following viewers and queues are searched:

• • • Connections attempts.
    • Bounced messages.
    • Rejected messages.
    • Delivered messages.
    • Held messages.
    • Active messages.
    • Archived messages.

Message results will display items from the Rejected and Deferred queue, which retain rejection and deferral records for a maximum of 7 days.

Message Tracking Functionality

The message tracking functionality allows users to benefit from the following features:

• • • The From Address field searches for header and envelope addresses.
    • Search result views are customizable, so you only see the required information.
    • The results can be refined and filtered without resubmitting the search.
    • The message's history can be tracked using Held Release Event Information.
    • The received and delivery message views can be compared side by side.
    • A message can be tracked using only the sender's IP address.
    • Permit or block options are available for inbound messages.

When using the To/From email address fields, enter the full email address for accurate results. A wildcard entered at the beginning of the search term is not supported and may return unpredictable results. Searching the To/From fields for a single word may also return unpredictable results, as messages may be returned from a message's "Display Name" field and not directly from the header or envelope email address.

Accessing Message Tracking

To access Message Tracking:

1. Log on to the Mimecast Administration Console.
2. Navigate to Message Center | Message Tracking.
3. Select the Search by ID tab to perform a more targeted search.
4. Provide as much information as you can in the following fields. The "Search by Data" and "Search by ID" columns denote the available fields in each tab.

   Field / Option	Search by Data	Search by ID	Description
   From	Y	N	Enter a sender's email address (e.g. user or [e-mail]) or domain (e.g. domain or domain.com).
   To	Y	N	Enter a recipient's email address (e.g. user or [e-mail]) or domain (e.g. domain or domain.com).
   Date Range	Y	Y	Select a search date range from the drop down list. If a custom date range is specified, you can't search back more than 30 days.
   Message ID	N	Y	Enter a message's ID
   Subject	Y	N	Enter a message's subject.	These fields aren't displayed by default. Click on the Show More link to display them.
   Sender IP Address	Y	N	Enter a sender's IP address.
   URL **	Y	N	Enter a URL found in the body of an email.

5. Click on the Search button. Your results display.

The ability to search by URL is only available with a subscription to Internal Email Protect.  Only URLs contained within the body of an email can be searched. Both Mimecast re-written and original URLs can be searched.  A URI (Uniform Resource Identifier) must be entered in the URL search box, for example, https://www.mimecast.com. The first 150 URLs in an email are extracted and available for search. URLs within messages before the URL search feature is deployed will not be searchable.

If the Enforce Archive Search Reason setting is enabled in your Account Settings, a popup message is displayed, forcing you to enter a Search Reason.

Viewing Message Details

Click on a message to access detailed information in the Message Details pop-out panel. This allows you to:

• • • Access metadata and SMTP transmission information.
    • Compare sender and recipient message views side by side.
    • Permit or block message delivery for the recipient.
    • Report messages as spam, malware, or phishing.
    • Release held messages upon investigation.
      

      View the Managing Message Details page for further details.

Managing Your Search Results

Message tracking allows you to:

• • • Customize the view of the search results page and apply filters to display only the message details that are most relevant without having to search again. See the Message Center: Customizing Message Views page for further information.
    • Export your search results to a file. See the Export Results in Accepted Messages page for details.
    • Refine your search parameters without performing a new search.

To manage your search results:

1. Make your adjustments in the fields displayed at the top of the results.
2. Click on the Search button to display the refined results.

See Also...

• • • Email Security Cloud Gateway - Accepted Messages
    • Email Security Cloud Gateway - Managing Message Details