Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > Viewing and searching logs > Personal Email Manager Audit Log
Personal Email Manager Audit Log
Administrator Help | Forcepoint Email Security | Version 8.5.x
The Personal Email Manager Audit Log records end-user email management activities performed from either the Personal Email Manager notification message or the Quarantined Messages List. Access the Personal Email Manager Audit Log from the Personal Email Manager tab on the page Main > Status > Logs.
Personal Email Manager Audit Log data
The following table details the data that is collected and displayed in the Personal Email Manager Audit Log in table format:
 
Message Data Item
Description
Date
The date and time an action was performed on a message in Personal Email Manager.
User Name
The email address of the Personal Email Manager user who performed the message action.
End-user Action
The action performed on the message in Personal Email Manager (Deliver, Delete, or Clear All Messages; does not include the actions Add to Always Block list, Add to Always Permit list, Forward, or Download).
If the action Clear All Messages was performed, all logs are deleted from Personal Email Manager and a separate log for each deletion is recorded in the Personal Email Manager Audit Log.
Message ID
A database-generated message identifier. The Message ID for a message with multiple recipients may appear multiple times in the log.
End-user Action Status
An indicator of whether the Personal Email Manager end-user action was completed successfully (Success or Failure).
Personal Email Manager Audit Log search options
The Personal Email Manager Audit Log can be searched using options such as date range or keyword. The View from/To calendar controls are used to determine the date and time range for a search. The default value for the from and to fields is the date and time at which the log is opened. The calendar includes the following options:
*
The pull-down menu View is used to select the range of log entries to display; All, One Day, One Week, One Month, or Custom.
*
Back and Next arrows display around the month and year at the top of the calendar to change the month and the year.
*
The current date displays in the lower left corner of the calendar; selection sets the calendar to the current date.
*
The Clean option is used to clear the current date/time calendar selection.
*
The Today option is used to set the calendar date to the current date.
*
The entry fields to the right of the calendar are used to set the time range in hours and minutes.
Search the Personal Email Manager Audit Log
1.
From the pull-down menu View, select the range of log entries to display; All, One Day, One Week, One Month, or Custom.
Selection of Custom enables the View from and To fields to specify the desired custom date and time range.
2.
Use the icons < and > to specify the time range.
3.
(If Custom was selected) Enter the desired date and time range in the fields, or use the calendar functionality.
4.
From the pull-down menu Keyword search, select a Personal Email Manager Audit Log element in which to search; Message ID or User Name.
5.
In the text field, enter a search term.
Alphanumeric characters are supported in the keyword search entry field.
6.
From the pull-down menu Appliance, select the appliance on which to perform the search.
The default is the active appliance.
7.
Click Search.
The search results display.
8.
(Optional) Restore all search settings to the default, click Set to Default.
Search settings are reset.
Configure display settings and navigate log entries
1.
From the pull-down menu Per page, select the number of entries to display; 25, 50, 100, or 200.
2.
Scroll through Personal Email Manager Audit Log pages; select the arrows to go back and next, or to the first and last pages of Personal Email Manager Audit Log entries.
3.
Jump to a specific page; in the field Page, enter the page number and select Go.
Personal Email Manager Audit Log export options
The Export option is used to preserve Personal Email Manager records by exporting log data. Exporting does not remove records from the Personal Email Manager Audit Log; it copies log data to a CSV or HTML file. It is recommended to export data on a regular basis.
Export Personal Email Manager Audit Log records
1.
From the pull-down menu Export range, select a time period; Current page, Last 24 hours, Last 7 days, or Last 30 days.
Selection of Last 30 days exports the entire Personal Email Manager Audit Log file.
The Export Log dialog box displays.
2.
From the pull-down menu File type, select the desired output file type; CSV or HTML.
*
Selection of CSV enables data to be opened or saved as a text file in comma-separated value format.
*
Selection of HTML enables data to be opened or saved as an HTML file.
3.
Click OK.
The Export Log window closes and the selected data is exported.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > Viewing and searching logs > Personal Email Manager Audit Log
Copyright 2022 Forcepoint. All rights reserved.