Logs

With a lot of sensitive data involved in emails, it is essential to track the events that occur in your organization. Using Zoho Mail's Admin Report Logs, you can track events based on categories, admin, user, or the operation performed. The logs section is split into the Mail logs and Audit logs.

Mail Logs​

The reports available under Mail logs are as follows:

Delivery Logs

The Delivery logs report displays the log of emails on a particular date or date range as per your request. To view the email delivery logs, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Select Logs on the left pane of Admin Reports and choose Mail logs. The Delivery logs page appears.
3. Choose a date range and select a desired condition from the below options:
   • From address - You can choose this option if you want to fetch the logs of emails sent from a particular account. 
   • Recipient - You can choose this option if you want to fetch the logs of emails received by a particular account.
   • MessageID - You can choose this option if you want to fetch the log of a particular message.
4. Enter the email address or the MessageID in the search bar and hit enter to complete the query. The email delivery logs for the selected conditions appear.
   • From - Mentions the "from address" of the respective email.
   • Sent time - Mentions the time the email was sent or received.  
   • Email size - Mentions the size of the respective email.
   • Status - Mentions whether the email was successfully delivered or not.​
     
5. Click any record to view more details about the delivery log.
6. Select Manage Columns from the upper right corner and select the preferred columns to be displayed:
   • From
   • Recipient(s)
   • Sent time
   • Email size
   • Status
   • Sender IP
   • Original sender
   • Authenticated
   • MessageID
   • Spam
     
7. Drag and drop the columns to view the report in the preferred order. Select Reset column list to view the default columns.
8. To export the report, click the Export button from the top right corner of the page and select Encrypt with password to prevent unauthorized access to your data.
   
9. Click the Schedule export button. The export runs in the background.

Follow the steps given in Schedule Exports help section to view and download your exported data.

 Audit Logs

The reports available under Audit logs are as follows:

Admin Activity

The Admin activity report helps you to track all the events performed by an admin. The report displays the admin's email address along with the event description, date and time of the event, and IP address of the client from which the event was performed. To access Admin activity, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Audit logs. The Admin activity section under Audit logs appears by default.
3. On the Admin activity​ page, you will find the below fields:

   Event category	Mentions the Category in which the change was performed.
   Event description	The details of the event and the changes made are displayed.
   Performed by	Mentions which admin made the respective changes in the events.
   Event time	Mentions when—the date and time, the event was performed.
   Client IP address	The IP address of the mail client from which the actions have been performed will be displayed.

   
4. With the filter options, you can consolidate the audit logs by Date performed, Category, Operation, admin, or user.​

   Note:

   Alternatively, you can also type your required query and select from the list of options from the drop-down. For example, if you type forwarding in the search bar, the categories that contain the keyword forwarding appears. Select the desired event category.
   

5. To export the report, click the Export button from the top right corner of the page.
6. Choose the desired option in the Admin activity dialog.
   • Export all data
   • Export loaded (xxx) data
     
7. Select Encrypt with password to prevent unauthorized access to your data and click the Schedule export button.

Follow the steps given in Schedule Exports help section to view and download your exported data.

 Calendar Activity

The Calendar activity report helps you to track all the actions performed in the calendar by admins. The report displays the admin's email address along with the event description, date and time of the event, and IP address of the client from which the event was performed. To access Calendar activity, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Audit logs.
3. Select Calendar activity. The Calendar activity​ page displays the below information:

   Event category	Mentions the Category in which the change was performed.
   Event description	The details of the event and the changes made are displayed.
   Performed by	Mentions which admin made the respective changes in the events.
   Event time	Mentions when—the date and time, the event was performed.
   Client IP address	The IP address of the mail client from which the actions have been performed will be displayed.