Target
Administrators who are responsible for the initial setup and operational management of Email DLP are the target audience for this article.
Objective
This article explains how to download the filter history of Email DLP.
Precautions
- This article is based on the product specifications as of July 2025 and is subject to change without notice.
- Administrator privileges are required to check the actual screen or change settings in Email DLP.
For information on how to set up administrators, please refer to the following article:
Set/Change Administrators - For information on how to access Email DLP, please refer to the following article:
How to Access the Email DLP Management Console - It may take a few minutes to 15 minutes for the file to become available for download, depending on the selected time period.
- The output format is a CSV file (UTF-8).
※ If using Google Drive, open the file with a spreadsheet after uploading to display it without garbled text.
Procedure
1. From the left menu of the Email DLP management screen, click [History] - [Download Filter History].
2. Enter the target period and select [Request logs].
※ The shortest available history is from 75 minutes ago.
※ You can output up to 2 requests at the same time, and up to 10 requests within 24 hours.
※ The maximum retrievable history is approximately 4 months.
2. Select the request with the status "Completed".
3. Confirm the password and select the download link.
※ The download link is valid for 1 hour.
4. Extract the downloaded ZIP file using the password confirmed in step 3.
Items
The items in the CSV are as follows:
※ The history of emails that have not been sent or deleted (emails on hold or awaiting approval) will not be output.
※ The email delivery result will not be output.
※ For emails sent with the "Add Bcc" filter rule, some fields may be left blank.
※ If the original email subject contains a line break code, the rows may become misaligned.
| Item | Content | Remarks |
| tenant_id | Customer tenant domain | |
| filtered_time | Filtering time | Time zone is JST (UTC+0900) |
| rule_group_name | Applied rule group name | |
| rule_name | Applied rule name | |
| action_results | Action results | send : Send suspend : Suspend delete : Delete approval : Approval |
| has_attachment | Attachment presence | Yes / No |
| encryption | Attachment auto-encryption rule applied | TRUE / FALSE ※ Regardless of the presence of attachments, if the automatic encryption of the matching rule is enabled, it outputs TRUE. ※ Even if encryption is excluded by the [Encryption Policy] when attachment encryption is set in the applied rule, it outputs TRUE. (In this case, the file will not actually be encrypted.) |
| subject | Subject | |
| sender | Sender email address | ※ Envelope from address |
| recipient | Recipient email address | ※ Envelope to address |
| mail_size | Total mail size | |
| action_time | Time the mail was sent or deleted | |
| approver | User who performed the approval action | ※ In the case of temporary suspension, the sending user will be displayed. (If the sending user has never accessed the user interface, "system@mo.hdems.com" will be displayed.) |
| processing_results | Processing results |
send : Manual send |
| suspension_time | Mail waiting time (unit: seconds) | |
| uuid | UUID | System management ID (not Message-ID) |
| mail_id | Mail ID | System management ID (not Message-ID) |