Reporting and Message Trace
Microsoft Exchange Online Protection (EOP) offers many different reports that can help you determine the overall status and health of your organization. Some reports are available in the Microsoft 365 admin center, while others are available in the Exchange admin center (EAC).
Looking for information about all EOP features? See the Exchange Online Protection Service Description.
Microsoft 365 admin center reports
The Reports page in the Microsoft 365 admin center provides information about message traffic, spam and malware detections, and messages affected by Exchange Transport Rules or Data Loss Prevention (DLP) policies. The enhanced reports for protection, rules, and DLP offer an interactive reporting experience for EOP admins. These reports provide summary data and the ability to drill down into details about individual messages.
For more detailed information about these reports, see Use mail protection reports in Office 365 to view data about malware, spam and rule detections.
Excel download application reports
Email protection reports are also available in the Excel 2013 reporting workbook, which provides summary reports with drill-down capabilities. However, we recommend using the enhanced Microsoft 365 admin center reports instead. The Excel 2013 reporting workbook is planned to be deprecated in the future.
For more overview information and links to download and install the workbook, see Mail Protection Reports for Office 365. For information about how to use the workbook, see Mail Protection Reports Using the Excel Reporting Workbook.
Reporting using web services
Not available to EOP standalone customers. You can use the REST/OData Tenant Reporting Web service to programmatically collect summary and detailed reports about messaging data, and you can display the data on a web page in a custom management Web portal. For more information, see Office 365 Reporting Web Services.
The message trace feature in the EAC enables you as an administrator to follow email messages as they pass through the EOP. It helps you determine whether a targeted email message was received, rejected, deferred, or delivered by the service. It also shows what actions have occurred to the message before reaching its final status. Obtaining detailed information about a specific message lets you efficiently answer your user's questions, troubleshoot mail flow issues, validate policy changes, and alleviates the need to contact technical support for assistance. For more information, see Trace an Email Message.
To view feature availability across Office 365 plans, standalone options, and on-premise solutions, see Exchange Online Protection Service Description.