Email Hybrid Service Log

Administrator Help | Forcepoint Email Security | Version 8.5.x

The Email Hybrid Service Log contains records of email messages that are blocked by the email hybrid service before they reach the network. Functionality requires a valid subscription key for the Forcepoint Email Security Hybrid Module and successful registration with the module for the Email Hybrid Service Log to be available (see Registering the Email Security Hybrid Module).

Following successful registration with the email hybrid service, you can enable the Email Hybrid Service Log and set data delivery options on the page Settings > Hybrid Service > Hybrid Service Log Options. See Configuring the Email Hybrid Service Log. Access the Email Hybrid Service Log from the Email Hybrid Service tab of the page Main > Status > Logs.

Email Hybrid Service Log data

The following table details the message data collected and displayed in the Email Hybrid Service Log in table format:


Message Data Item	Description
Hybrid Service Log ID	A database-generated message identifier.
Date/Time	The date and time a message was received.
Subject	The message subject.
Sender Address	Message sender email address.
Recipient Address	Message recipient email address. If the message has multiple recipients, the first recipient address is displayed.
Sender IP	Message sender IP address.
Message Status	Current message status (e.g., discarded or bounced).
Reason	Supplied by the email hybrid service, the analysis result that determines message disposition.

Email Hybrid Service Log search options

The Email Hybrid Service Log Search Options section includes search options such as date range or keyword. The View from/To calendar controls are used to determine the date and time range for a search. The default value for the from and to fields is the date and time at which the log is opened. The calendar includes the following options:

Back and Next arrows display around the month and year at the top of the calendar to change the month and the year.

The current date displays in the lower left corner of the calendar; selection sets the calendar to the current date.

The Clean option is used to clear the current date/time calendar selection.

The Today option is used to set the calendar date to the current date.

The entry fields to the right of the calendar are used to set the time range in hours and minutes.

Search the Email Hybrid Service Log

From the section Email Hybrid Service Log Search Options, set the date and time to be searched in the fields View from and To.

(Optional) Use the calendar functionality to specify a date to search.

From the pull-down menu Keyword search, select a Email Hybrid Service Log element in which to search; Email Hybrid Service Log ID, Subject, Sender Address, Recipient Address, Sender IP, or Message Status.

In the field, enter a search term.

Alphanumeric characters are supported in the keyword search entry field.

Click Search.

The search results display.

(Optional) Restore all search settings to the default, click Set to Default.

Search settings are reset.

Configure display settings and navigate log entries

From the pull-down menu Per page, select the number of entries to display; 25, 50, 100, or 200.

Scroll through Email Hybrid Service Log pages, select the arrows to go back and next, or to the first and last pages of Email Hybrid Service Log entries.

Jump to a specific page; in the field Page, enter the page number and select Go.

Email Hybrid Service Log export options

The length of time Email Hybrid Service Log records are saved in the database depends on the message volume and database partition capacity. The Export option is used to preserve message records by exporting log data. Exporting does not remove records from the Email Hybrid Service Log; it copies log data to a CSV or HTML file. It is recommended to export data on a regular basis.