Export (0) Print
Expand All

Monitoring, reporting, and message tracing in Exchange Online

Exchange Online
 

Applies to: Exchange Online

Topic Last Modified: 2014-06-20

Microsoft Exchange Online offers many different reports that can help you determine the overall status and health of your organization. There are also tools to help you troubleshoot specific events (such as a message not arriving to its intended recipients), and auditing reports to aid with compliance requirements. The following table describes the reports and troubleshooting tools available to Exchange Online administrators.

 

Feature

Description

Where you can find it

For more information

Reports in the Office 365 admin center

The following reports about mailboxes, groups, and messaging data is available in the Microsoft Office 365 admin center. The enhanced reports for protection, rules, and DLP provide an interactive reporting experience for Exchange Online admins. These reports provide summary data and the ability to drill down into details about individual messages.

  • Mail   View information about mailboxes and groups in your organization.

  • Protection   View information about spam and malware sent to and from your organization, and the total volume of mail sent to and from your organization.

  • Rules   View information about custom rules that affected mail sent to and from your organization.

  • DLP   View information about Data Loss Prevention (DLP) policies and rules that affected mail with sensitive data sent to and from your organization.

 

Note:

The DLP feature is only available with certain Exchange Online subscription plans. For information about DLP feature availability with each plan, see the Data Loss Prevention table entries in the Exchange Online Service Description.

Additionally, you can use the Browsers used and Operating systems used reports to see which browsers and operating systems your users are accessing Office 365 with. For more information, View browser or operating system usage reports for Office 365.

In the Office 365 admin center, click Reports and then access the report you want to view.

For information about a specific report, open the report and hover over the information link next to the report title.

For more detailed information about the Reports page in the Office 365 admin center, see View and download reports about service usage in Office 365 and Use mail protection reports in Office 365 to view data about malware, spam, and rule detections.

Mail protection reports using the Excel reporting workbook

The email protection reports in the Excel 2013 reporting workbook are also available and provide summary reports with drill-down capabilities. However, we recommend using the enhanced Office 365 admin center reports instead. The Excel 2013 reporting workbook is planned to be deprecated in the future.

After it is installed, the workbook can be accessed directly using Excel 2013.

For more overview information and links to download and install the workbook, see Mail Protection Reports for Office 365.

For information about how to use the workbook, see Mail protection reports using the Excel reporting workbook.

Custom reports using reporting web services

Access to both summary and detailed reports about mailboxes, groups, and messaging data is available by using the REST/OData Tenant Reporting Web service, which is a programmatic interface that enables you to create custom reports.

https://reports.office365.com/ ecp/reportingwebservice/ reporting.svc

Office 365 Reporting Web Services

Message tracing

Follows email messages as they travel through your Exchange Online organization. You can determine if an email message was received, rejected, deferred, or delivered by the service. It also shows what actions have occurred to the message before reaching its final status. Obtaining detailed information about a specific message lets you efficiently answer your user’s questions, troubleshoot mail flow issues, validate policy changes, and alleviates the need to contact technical support for assistance.

In the Exchange admin center (EAC), go to Mail flow > Message trace.

Trace an Email Message

Audit logging

Tracks specific changes made by admins to your Exchange Online organization. These reports help you meet regulatory, compliance, and litigation requirements.

In the EAC, go to Compliance management > Auditing.

Exchange auditing reports

Unified Messaging call reports

Provides information about the voice mail calls forwarded to or placed by Unified Messaging (UM). Use these reports to monitor, troubleshoot, and report on UM for your organization.

You can access Unified Messaging call statistic reports by using the Call Statistics tool and access call logs for UM-enabled users by using the User Call Logs tool.

Run reports for voice mail calls

The following table describes when Exchange Online reporting and message trace data is available and for how long.

 

Report type

Data available for (look back period)

Latency

Office 365 admin center mailbox summary reports

60 days

Message data aggregation is mostly complete within 24-48 hours. Some minor incremental aggregated changes may occur for up to 5 days.

Office 365 mail protection summary reports

90 days

Message data aggregation is mostly complete within 24-48 hours. Some minor incremental aggregated changes may occur for up to 5 days.

Office 365 mail protection detail reports

90 days

For detail data that’s less than 7 days old, data should appear within 24 hours but may not be complete until 48 hours. Some minor incremental changes may occur for up to 5 days.

To view detail reports for messages that are greater than 7 days old, results may take up to a few hours.

Excel 2013 workbook summary report

180 days

Message data aggregation is mostly complete within 24-48 hours. Some minor incremental aggregated changes may occur for up to 5 days.

Excel 2013 workbook detail data

7 days

Data should appear within 24 hours but may not be complete until 48 hours. Some minor incremental changes may occur for up to 5 days.

Message trace data

90 days

When you run a message trace for messages that are less than 7 days old, the messages should appear within 5-30 minutes.

When you run a message trace for messages that are greater than 7 days old, results may take up to a few hours.

NoteNote:
Data availability and latency is the same whether requested via the UI (Office 365 admin center or the Excel 2013 workbook) or remote PowerShell.
 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft