Logs

With a lot of sensitive data involved in emails, it is essential to track the events that occur in your organization. Using Zoho Mail's Admin Report Logs, you can track events based on categories, admin, user, or the operation performed. The logs section is split into the Mail logs and Audit logs.

Mail Logs​

The reports available under Mail logs are as follows:

Delivery Logs

The Delivery logs report displays the log of emails on a particular date or date range as per your request. To view the email delivery logs, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Select Logs on the left pane of Admin Reports and choose Mail logs. The Delivery logs page appears.
3. Choose a date range and select a desired condition from the below options:
   • From address - You can choose this option if you want to fetch the logs of emails sent from a particular account. 
   • Recipient - You can choose this option if you want to fetch the logs of emails received by a particular account.
   • MessageID - You can choose this option if you want to fetch the log of a particular message.
4. Enter the email address or the MessageID in the search bar and hit enter to complete the query. The email delivery logs for the selected conditions appear.
   • From - Mentions the "from address" of the respective email.
   • Sent time - Mentions the time the email was sent or received.  
   • Email size - Mentions the size of the respective email.
   • Status - Mentions whether the email was successfully delivered or not.​
     
5. Click any record to view more details about the delivery log.
6. Select Manage Columns from the upper right corner and select the preferred columns to be displayed:
   • From
   • Recipient(s)
   • Sent time
   • Email size
   • Status
   • Sender IP
   • Original sender
   • Authenticated
   • MessageID
   • Spam
     
7. Drag and drop the columns to view the report in the preferred order. Select Reset column list to view the default columns.
8. To export the report, click the Export button from the top right corner of the page and select Encrypt with password to prevent unauthorized access to your data.
   
9. Click the Schedule export button. The export runs in the background.

Follow the steps given in Schedule Exports help section to view and download your exported data.

Rejection Logs

The Rejection logs section lists the emails that failed to get delivered to the intended recipients on a specific date or date range that you select. If the emails sent from your domain get rejected often, it will affect your domain reputation as well as Zoho's servers. Hence it is important for administrators to monitor the rejection logs and make appropriate configurations to avoid emails getting rejected.

Follow the below steps to access Rejection logs:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Mail logs.
3. Select Rejection logs and choose the duration for which you want to view the report.
4. If required, use the search bar to narrow down the result based on the available criteria:
   • from
   • to/cc
   • from does not contain
   • to/cc does not contain
   • subject
   • message ID
   • original sender
   • original receiver
   • sender IP
   • failure reason
5. Rejection logs appear with the From address, Recipients, Sent time, Email size and Status of the message. You can customize the columns as per your preference.
6. Click on a row to view the rejection details such as:
   • Message ID
   • User authentication
   • Subject of the email
   • Sender IP
   • Relay address
   • Reason for rejection
7. Use the navigation keys on the top menu to view the Previous or Next rejection log.
8. Click the Export button to save a copy of the report to your computer.

 Audit Logs

The reports available under Audit logs are as follows:

Admin Activity

The Admin activity report helps you to track all the events performed by an admin. The report displays the admin's email address along with the event description, date and time of the event, and IP address of the client from which the event was performed. To access Admin activity, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Audit logs. The Admin activity section under Audit logs appears by default.
3. On the Admin activity​ page, you will find the below fields:

   Event category	Mentions the Category in which the change was performed.
   Event description	The details of the event and the changes made are displayed.
   Performed by	Mentions which admin made the respective changes in the events.
   Event time	Mentions when—the date and time, the event was performed.
   Client IP address	The IP address of the mail client from which the actions have been performed will be displayed.

   
4. With the filter options, you can consolidate the audit logs by Date performed, Category, Operation, admin, or user.​

   Note:

   Alternatively, you can also type your required query and select from the list of options from the drop-down. For example, if you type forwarding in the search bar, the categories that contain the keyword forwarding appears. Select the desired event category.
   

5. To export the report, click the Export button from the top right corner of the page.
6. Choose the desired option in the Admin activity dialog.
   • Export all data
   • Export loaded (xxx) data
     
7. Select Encrypt with password to prevent unauthorized access to your data and click the Schedule export button.

Follow the steps given in Schedule Exports help section to view and download your exported data.

 Calendar Activity

The Calendar activity report helps you to track all the actions performed in the calendar by admins. The report displays the admin's email address along with the event description, date and time of the event, and IP address of the client from which the event was performed. To access Calendar activity, follow these steps:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Audit logs.
3. Select Calendar activity. The Calendar activity​ page displays the below information:

   Event category	Mentions the Category in which the change was performed.
   Event description	The details of the event and the changes made are displayed.
   Performed by	Mentions which admin made the respective changes in the events.
   Event time	Mentions when—the date and time, the event was performed.
   Client IP address	The IP address of the mail client from which the actions have been performed will be displayed.

   

Access Logs

Zoho Mail displays the instances when users access their accounts via IMAP/ POP. Follow these steps to view the IMAP/ POP access log report:

1. Log in to Zoho Mail Admin Console and select Reports on the left pane. The Admin Reports page opens in a new tab.
2. Navigate to Logs and select Access logs.
3. Select either POP or IMAP based on your requirement.
4. Choose a user from the drop-down menu.
5. Select the duration for which you want to view the report. The IMAP/ POP activity appears with the following details:
   • Remote IP
   • Access time
   • Session ID
   • Status
   • Description