Archiving Search Logs

Document created by user.oxriBaJeN4 Employee on Sep 10, 2015Last modified by user.oxriBaJeN4 Employee on Apr 7, 2017
Version 6Show Document
  • View in full screen mode

The Archive contains the email communications for your organization within Mimecast. It is important, therefore, that a full log be kept of individuals with Administrative permissions that have performed searches in the Archive. The Search Logs lists all searches performed by Administrators, including those that have not been saved.

Although Administrators may have the ability to search the Archive, they may not be able to access the content of the messages. This is dependent on the permissions assigned to the Administrator.


The logs are immutable, and will be available indefinitely for the Mimecast account, regardless of the Retention period.


To display a search log file:

  1. Log in to the Administration Console.
  2. Click on the Administration toolbar button. A menu drop down is displayed.
  3. Click on the Archive | Search Logs menu item. A list of log files is displayed.
  4. Click on a log file to display the following details:

Run TimeTime and date stamp of when the search was run.
UserThe administrator that performed the search.


Indicates that the archive search was saved.


Shows that the search was linked to an eDiscovery case.
DescriptionThe name of the saved search, or an audit of the page and depth viewed of the results.
Search FilterDetails the parameters of the search (e.g. Srch[search phrase]From[from address]To[]).
From DateIndicates the starting date filter applied to the search.
To DateIndicates the end date filter applied to the search.