Download Message Search Results

Whenever you are on the Search Results page, you can download information about the list of messages that match the current search filters.

TIP: The downloaded file will contain information about up to 10,000 messages. If more than 10,000 messages are in the search results, the downloaded file will contain the first 10,000, determined by the display order, which you can change by clicking the top of any column in the search results table.

  1. Go to Analyze > Search Messages. (You can also get to the message Search Results page in many other ways. For example, if you're on the dashboard, click a threat type, and then click Show messages, you'll be taken to the Search Message page with the threat type already defined as a filter.)
  2. Define the filters for the messages you want to see in the list.
  3. Click Search.
  4. Click Download Results.
  5. Click Download CSV.

A file named message export.csv is downloaded automatically to the default location that you have set in your browser for downloaded files. The file will contain the following information from/about each message, if available:

  • Date
  • From
  • Reply-to/Forwarded From
  • To
  • Subject
  • Message-ID
  • Message Trust Score*
  • Sending Domain
  • Domain Reputation*
  • Sending IP Address
  • PTR Name
  • IP Reputation
  • Enforcement Status
  • Enforcement Action
  • DMARC Result
  • Authenticity Score
  • Attack Classes
  • Malicious URLs
  • All URLs
  • Malicious Attachments
  • All Attachments
  • Matched Policies
  • Matched CDRs

* Calculated by Cloud Email Protection.