Reporting and message trace in Exchange Online Protection

Microsoft Exchange Online Protection (EOP) offers many different reports that can help you determine the overall status and health of your organization. Some reports are available in the Microsoft 365 admin center, while others are available in the Exchange admin center (EAC).

Looking for information about all EOP features? See the Exchange Online Protection service description.

Microsoft 365 admin center reports

The Reports page in the Microsoft 365 admin center provides information about message traffic, spam and malware detections, and messages affected by mail flow rules (also known as transport rules) or Microsoft Purview Data Loss Prevention (DLP) policies. The enhanced reports for protection, rules, and DLP offer an interactive reporting experience for EOP admins. These reports provide summary data and the ability to drill down into details about individual messages.

For more detailed information about these reports, see Use mail protection reports to view data about malware, spam, and rule detections.

Reporting using web services


Many of the REST-based reporting features and related cmdlets were deprecated in January, 2018. For information about the available replacement Microsoft Graph reports in Office 365, see the subtopics of Working with usage reports in Microsoft Graph.

Not available to EOP standalone customers. You can use the REST/OData Tenant Reporting web service to programmatically collect summary and detailed reports about messaging data, and you can display the data on a web page in a custom web management portal.

Message trace

The message trace feature in the EAC lets you, as an administrator, follow email messages as they pass through the EOP. It helps you determine whether a targeted email message was received, rejected, deferred, or delivered by the service. It also shows what actions have occurred to the message before reaching its final status. Obtaining detailed information about a specific message lets you efficiently answer your user's questions, troubleshoot mail flow issues, validate policy changes, and alleviates the need to contact technical support for assistance. For more information, see Run a message trace and view the results in the Exchange admin center.

Feature availability

To view feature availability across plans, standalone options, and on-premises solutions, see Exchange Online Protection service description.