What is Email Log Search for?


Email Log Search is a tool for tracking the mail sent and received by users in your domain over the last 30 days using email log searches. You can search using the following criteria: emails, email address or message ID.


Searching email logs, used to diagnose problems that occur and fix them.


After performing a search, you can download the results to a CSV file or open them in Google Sheets for easy viewing. The CSV or spreadsheet data contains the delivery steps and status of all messages returned by the search. These files can be easily shared with, for example, Revolgy customer support.


How to start? 


Here's how to search for emails.


  • Log in to the admin console at http://admin.google.com
  • From the home page, go to Reports > Audit > Search the email log
  • If you don't see Reports on the home page, you may need to click on More Controls at the bottom.


Search criteria


  • Select a time period using the list or enter a range using the calendar. The range is limited to the last 30 days.


Note: To search for messages older than 30 days, you must enter the Recipient and Message ID, the only search fields available. You do not have access to the message delivery history, only the message details after delivery.


  • (Optional) Search by entering criteria in some of the following fields:


Sender or recipient - When searching by recipient, enter the recipient's full or partial email address. When searching by sender, enter all or part of the sender's "Return Path" address. (You can find the sender's sender address in the header of an email message from that sender.) If you are looking for an exact match, enter the full email address and enclose it in quotation marks, for example, "john @ xyz" .com".



Note: When searching for an email sent to a group email address, search by the message ID. Searching with the group address as the recipient will not show delivery to individual group members.

  • Sender IP or Recipient IP - Enter the IP address of the sender or recipient. Make sure it is an exact IP address, otherwise the search will fail.


Note: When searching on the Sender IP server, search results may include messages that show the Google outbound IP address, not the expected public outbound IP for your domain. This is because messages composed using the Gmail web interface are forwarded to the Gmail servers for delivery, and therefore show the Google outgoing IP as the sending IP.


  • Subject - (not available for all accounts) Enter the subject of the email or part of the subject. The subject of the email must contain the exact text (case-insensitive) that you enter for the message to be returned.
  • Message ID - Enter a unique message identifier located in the header of the message. If you also enter a date and time range, note that the Message ID will override the date and time range and return a message found out of range. See Message Headers for instructions on finding the message ID for different mail providers. make sure it is an exact IP address, otherwise the search will fail.



Note: When searching on the Sender IP server, search results may include messages that show the Google outbound IP address, not the expected public outbound IP for your domain. This is because messages composed using the Gmail web interface are forwarded to the Gmail servers for delivery, and therefore show the Google outgoing IP as the sending IP.


Results and work with them



Click the Search button. You should see the search results within a minute or two (although in some cases the wait can be up to an hour). Search results are limited to 1000 messages.

For multi-page results, use the arrows at the top or bottom of the message list to change pages.



Click on the subject (or message ID) to view the message details, including delivery path and status. View the email details of the search results.


To download search results as a CSV file or export them to Google Sheets, click Download at the top of the page.



Download will only appear if the results return exportable data.


It may take longer to create a file to download a large number of search results.


The CSV file (or spreadsheet) displays the delivery steps for each report in the search results. So expect your CSV file or spreadsheet to have many more rows of data than the actual number of search results.



The data in the CSV file (or spreadsheet) is limited to 1,000 messages (identical to the limits of the search results).


Post-delivery message details are not available in the CSV file.