Search
Clear search
Close search
Google apps
Main menu

Google Apps is now G Suite. Same service, new name. More about the name change.

Find messages with Email Log Search

You can search for sent and received messages using Email Log Search. You can tailor your search using specific criteria, including email or IP address, or message ID header. For example, if you search by the email address of the recipient, you'll only see the delivery events associated with that user, not everyone in the thread.

For the best search results, be sure to select the most restrictive date and time range, and enter only 1 sender or recipient.

Note: You might need to wait up to an hour for the search results to display.

Learn more about using the tool.

Available only for G Suite Business and G Suite. Tool not available to resellers when accessing a resold domain Admin console using the reseller console.​

Find messages

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Reportsand thenAuditand thenEmail log search.

    To see Reports on the dashboard, you might have to click More controls at the bottom. 

  3. Select a date range using the drop-down list, or specify a range using the calendar. The range is limited to the last 30 days.
  4. (Optional) If you specify a date range and also want to specify a time range, enter a different start and end time for the date range. The times shown represent the time zone of the computer you're using to sign in to the Admin console and run the reports.
  5. (Optional) Enter search criteria in any of the following fields:
    • Sender or Recipient—Enter sender's or recipient's complete or partial email address.

      Note: When searching for an email sent to a group email address, search by message ID rather than by recipient address.

    • Sender IP or Recipient IP—Enter the sender or recipient IP address. Make sure it's the exact IP address, or the request will fail.
    • Message ID—Enter the unique message identifier located in the message header. If you also specify a date/time range, note that message ID overrides date/time range and will return a message found outside the range.

      See Message headers for instructions on how to find the message ID for different mail providers. 

  6. Click Search. The query can take a couple of minutes to execute.

    Note: The search returns the first 1000 messages that match the criteria.

Next steps

In the search results list, you can:

  • Use the arrows at the top of the list to navigate through the pages of results.
  • Download your search results, or export them to Google Sheets by clicking Download Download at the top. You'll only see Download if the results return exportable data. Depending on the amount of data, it can take awhile before the file is ready to open. If you download the results as a CSV file, you can choose the spreadsheet editor you want to use.
  • Click a subject or message ID to see the message details. Learn about viewing Email Log Search result details.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.