Skip to main content
ovoda
Staff
Staff
December 15, 2024

Troubleshooting Tip: How to find out who and when released or deleted an email from Quarantine

  • December 15, 2024
  • 0 replies
  • 575 views
Description

This article describes how to determine what action was taken with a Quarantined email (including personal quarantine and system quarantine).

Scope FortiMail v6.4.x, v7.2.6, v7.4.3, v7.6.1, v7.8.x.
Solution

The cross-search log shows the email logs for a maximum of 60 minutes. In some cases, the email can be released or deleted after this time.

To find out all the details about the email releasing or deleting is possible to use the Session ID and make a search in the AntiSpam log.

 

  1. Copy the Session ID from the related Cross search log:


cross.png

 

  1. Search the AntiSpam log using this Session ID. Also, change the time range to start when the email was delivered and Quarantined (leave the End time as the current date and time):


search.png

 

  1. The search result shows who is visible and when the quarantined email has been released/deleted:


result.png