Home

Top 5 External Senders?

%3CLINGO-SUB%20id%3D%22lingo-sub-793225%22%20slang%3D%22en-US%22%3ETop%205%20External%20Senders%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-793225%22%20slang%3D%22en-US%22%3E%3CP%3EI%20wish%20to%20find%20the%20best%20way%20(and%20alternative%20ways)%20to%20find%20out%20which%20external%20parties%20send%20the%20most%20email%20to%20users%20in%20my%20tenant.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20cannot%20seem%20to%20find%20this%20straightforward%20and%20simple%20information%20on%20the%20Admin%20Center!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%2C%20I%20get%20ten%20times%20more%20email%20from%20the%20job%20boards%20I%20am%20registered%20on%2C%20than%20I%20do%20from%20Ocado.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHopefully%2C%20someone%20here%20knows.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-793225%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eexchange%20admin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Estatistics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-793306%22%20slang%3D%22en-US%22%3ERe%3A%20Top%205%20External%20Senders%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-793306%22%20slang%3D%22en-US%22%3EHave%20you%20tried%20the%20%E2%80%9DSent%20and%20received%20email%20report%E2%80%9D%3F%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fsecuritycompliance%2Fview-email-security-reports%23sent-and-received-email-report%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fsecuritycompliance%2Fview-email-security-reports%23sent-and-received-email-report%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%20Magnus%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-793308%22%20slang%3D%22en-US%22%3ERe%3A%20Top%205%20External%20Senders%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-793308%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F96771%22%20target%3D%22_blank%22%3E%40Chris%20Morley%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAFAIK%2C%20I%20don't%20think%20there%20is%20anything%20native%20to%20the%20Microsoft%20365%20admin%20portal%20that%20gives%20this%20currently.%20It%20is%20claimed%20in%20this%20support%20case%20but%20I%20can't%20personally%20claim%20or%20verify%20that%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_exchon-mso_o365b%2Ftop-sender-report%2F8da9e982-b177-4ed9-9090-439396e93510%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_exchon-mso_o365b%2Ftop-sender-report%2F8da9e982-b177-4ed9-9090-439396e93510%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESo%2C%20if%20it%20does%20great%2C%20if%20not%20there%20is%20a%20script%20here%20which%20you%20may%20be%20able%20to%20generate%20a%20report%20from%20the%20message%20trace%20logs%20-%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FOffice-365-Mail-Traffic-afa37da1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FOffice-365-Mail-Traffic-afa37da1%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20addition%2C%20many%20well%20known%20third%20party%20gateways%2C%20or%203rd%20party%20reporting%20tools%20would%20have%20this%20functionality.%20Just%20type%20in%20something%20like%20'Office%20365%20Mail%20traffic%20reports'%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-794091%22%20slang%3D%22en-US%22%3ERe%3A%20Top%205%20External%20Senders%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-794091%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F96771%22%20target%3D%22_blank%22%3E%40Chris%20Morley%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20I%20can%20find%20is%20in%20the%20Office%20365%20admin%20center%2C%20open%20up%20Office%20365%20Security%20and%20Compliance%20center%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethen%20go%20to%20mail%20flow%20%26gt%3B%20dashboard%20and%20click%20on%20the%20mailflow%20map%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20the%20right%20click%20on%20the%20'view%20details%20button'%20-%20it'll%20show%20a%20table%20of%20which%20direction%20and%20which%20domain%20email%20was%20sent%20to%20summarized.%20For%20example%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F126098i4F1C22D77C130788%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Mail%20fow%20report.png%22%20title%3D%22Mail%20fow%20report.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3BYou%20can%20adjust%20the%20filter%20for%20which%20day(s)%20this%20applies%20to.%20You%20can%20also%20have%20the%20report%20emailed%20to%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20the%20example%20above%2C%20the%20tenant%20is%20pure%20365%20-%20no%20hybrid%20business%20or%20funky%20connectors%2C%20which%20might%20complicate%20the%20report.%20Hopefully%20this%20can%20be%20a%20useful%20starting%20point.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%2C%3C%2FP%3E%3CP%3EMark%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I wish to find the best way (and alternative ways) to find out which external parties send the most email to users in my tenant.

 

I cannot seem to find this straightforward and simple information on the Admin Center!

 

For example, I get ten times more email from the job boards I am registered on, than I do from Ocado.

 

Hopefully, someone here knows.

3 Replies
Highlighted
Have you tried the ”Sent and received email report”? https://docs.microsoft.com/en-us/office365/securitycompliance/view-email-security-reports#sent-and-r...

Regards, Magnus
Highlighted
Hi @Chris Morley

AFAIK, I don't think there is anything native to the Microsoft 365 admin portal that gives this currently. It is claimed in this support case but I can't personally claim or verify that

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_exchon-mso_o365b/top-sende...

So, if it does great, if not there is a script here which you may be able to generate a report from the message trace logs -

https://gallery.technet.microsoft.com/office/Office-365-Mail-Traffic-afa37da1

In addition, many well known third party gateways, or 3rd party reporting tools would have this functionality. Just type in something like 'Office 365 Mail traffic reports'

Hope that answers your question

Best, Chris
Highlighted

Hey @Chris Morley 

 

Best I can find is in the Office 365 admin center, open up Office 365 Security and Compliance center

 

then go to mail flow > dashboard and click on the mailflow map

 

On the right click on the 'view details button' - it'll show a table of which direction and which domain email was sent to summarized. For example:

 

Mail fow report.png You can adjust the filter for which day(s) this applies to. You can also have the report emailed to you.

 

For the example above, the tenant is pure 365 - no hybrid business or funky connectors, which might complicate the report. Hopefully this can be a useful starting point.

 

Cheers,

Mark