Forum Discussion
WHO released emails from quarantine?
NicoRotaryCH from the security portal, navigate to the audit blade and search for the activity called the Released Quarantine message
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
NicoRotaryCH from the security portal, navigate to the audit blade and search for the activity called the Released Quarantine message
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
OK I did some more testing.
I used the Network message ID as keyword search for both the message I released...
... and the message that was released for unknown reasons:
Unfortunately I can find any release information in the audit log.
FYI the details of the message:
Do you have any more ideas? Otherwise I will open a ticket.
Thank you!
NicoRotaryCH lets do this, in the audit logs blade select all the quarantine activities and check what results will get you. Don't forget to set the date of you incident
Thank you very much!
Unfortunately this only help to some extent: I ran both classic and regular searches
but they only generated one result. This is not one of the three messages but a release I did for testing purposes.
So the three messages released are not on the list!
