The Archive contains the email communications for your organization within Mimecast. It is important, therefore, that a full log be kept of individuals with Administrative permissions that have performed searches in the Archive. The Search Logs lists all searches performed by Administrators, including those that have not been saved.
Although Administrators may have the ability to search the Archive, they may not be able to access the content of the messages. This is dependent on the permissions assigned to the Administrator.
The logs are immutable, and will be available indefinitely for the Mimecast account, regardless of the Retention period.
To display a search log file:
- Log in to the Administration Console.
- Click on the Administration toolbar button. A menu drop down is displayed.
- Click on the Archive | Search Logs menu item. A list of log files is displayed.
- Click on a log file to display the following details:
|Run Time||Time and date stamp of when the search was run.|
|User||The administrator that performed the search.|
|Indicates that the archive search was saved.|
|Shows that the search was linked to an eDiscovery case.|
|Description||The name of the saved search, or an audit of the page and depth viewed of the results.|
|Search Filter||Details the parameters of the search (e.g. Srch[search phrase]From[from address]To).|
|From Date||Indicates the starting date filter applied to the search.|
|To Date||Indicates the end date filter applied to the search.|