在 Exchange Online 中監控、報告和執行郵件追蹤Monitoring, reporting, and message tracing in Exchange Online

Exchange Online 提供許多不同的報告可協助您決定的整體狀態和組織的狀況。也有工具來協助您疑難排解特定事件 (例如郵件給其預定的收件者無法到達) 和稽核報告來協助規範需求。下表說明報表和 Exchange Online 系統管理員可用的疑難排解工具。Exchange Online offers many different reports that can help you determine the overall status and health of your organization. There are also tools to help you troubleshoot specific events (such as a message not arriving to its intended recipients), and auditing reports to aid with compliance requirements. The following table describes the reports and troubleshooting tools that are available to Exchange Online administrators.

注意

從舊的 Office 365 系統管理中心報告的對應,請參閱「 我的 Office 365 報告在哪裡吗?For a mapping of reports from the old Office 365 admin center, see Where did my Office 365 report go?

功能Feature 描述Description 您可以在哪裡找到它Where you can find it 相關資訊For more information
在 Office 365 系統管理中心的流量報告Usage reports in the Office 365 admin center
Office 365 群組活動檢視建立及使用 Office 365 群組數目的相關資訊。Office 365 groups activity View information about the number of Office 365 groups that are created and used.
電子郵件活動檢視傳送、 接收和讀取整個組織中與特定使用者的郵件數目的相關資訊。Email activity View information about the number of messages sent, received and read in your whole organization, and by specific users.
電子郵件應用程式使用狀況檢視連線至 Exchange Online 電子郵件應用程式的相關資訊。這包括每個應用程式的連線總數和要連線的 Outlook 版本。Email app usage View information about the email apps that are connecting to Exchange Online. This include the total number of connections for each app, and the versions of Outlook that are connecting.
信箱使用量檢視所使用的儲存區的相關資訊、 配額使用率、 項目計數及信箱的最後活動 (傳送或讀取的活動)。Mailbox usage View information about storage used, quota consumption, item count, and last activity (send or read activity) for mailboxes.
在 Office 365 系統管理中心的https://portal.office.com/adminportal/home,按一下 [報告]>流量。在儀表板的最頂端,按一下 [選取報表。 在中會出現下拉式清單中,進行下列選擇: Office 365] 區段中: Office 365 安全性群組 activityExchange] 區段中: activityEmail app usageMailbox 流量的電子郵件In the Office 365 admin center at https://portal.office.com/adminportal/home, click Reports > Usage. At the top of the dashboard, click Select a report. In the in the drop-down list that appears, make one of these selections: Office 365 section: Office 365 groups activityExchange section: Email activityEmail app usageMailbox usage Office 365 系統管理中心-Office 365 中會報告群組Office 365 Reports in the admin center - Office 365 groups
Office 365 系統管理中心報告的-電子郵件活動Office 365 Reports in the Admin Center - Email activity
Office 365 系統管理中心報告的-電子郵件應用程式使用狀況Office 365 Reports in the Admin Center - Email apps usage
Office 365 系統管理中心報告的-信箱使用量Office 365 Reports in the Admin Center - Mailbox usage
安全性&Office 365 系統管理中心中的規範報告Security & compliance reports in the Office 365 admin center
這些增強的報告包含摘要資訊和向下切入如需詳細資訊的能力的 Exchange Online 系統管理員提供的互動式報表體驗。These enhanced reports provide an interactive reporting experience for Exchange Online admins, which includes summary information, and the ability to drill down for more details.
資料外洩防護 (DLP) 檢視 DLP 原則和規則影響隨著它們輸入和離開貴組織包含機密資料郵件的相關資訊。Data loss prevention (DLP) View information about DLP policies and rules that affect messages containing sensitive data as they enter and leave your organization.
請注意: DLP 只是特定的 Exchange Online 訂閱計劃中提供。資訊,請參閱Exchange Online 服務說明中的資料外洩防護項目。Note: DLP is only available in certain Exchange Online subscription plans. For information, see the Data Loss Prevention entries in the Exchange Online Service Description.
進階威脅保護 (ATP) 檢視資訊安全連結和安全附件因受到 ATP 的一部分。Advanced Threat Protection (ATP) View information about safe links and safe attachments that are part of ATP.
請注意: ATP 提供 Office 365 企業版 E5,但是您也可以購買 ATP 做到其他訂閱計劃的附加元件。如需詳細資訊,請參閱Office 365 進階威脅 Protection 服務說明Note: ATP is available in Office 365 Enterprise E5, but you can also purchase ATP as an add-on to other subscription plans. For more information, see Office 365 Advanced Threat Protection Service Description.
Exchange Online Protection (EOP) 檢視有關惡意程式碼偵測、 詐騙的郵件、 垃圾郵件偵測及從您的組織的郵件流程的資訊。Exchange Online Protection (EOP) View information about malware detections, spoofed mail, spam detections, and mail flow to and from your organization.
Office 365 安全性&規範中心https://protection.office.com,按一下 [報告]>儀表板。 選取其中一個] 頁面可用的報告: DLP 報告: DLP 原則相符項目和 DLP 誤判覆寫。 ATP 報告: ATP 檔案類型、 ATP 郵件處理和威脅保護狀態。 EOP 報告: 惡意程式碼偵測、 上方的惡意程式碼、 主要寄件者和收件者] 詐騙電子郵件、 垃圾郵件偵測及傳送及接收郵件。In the Office 365 Security & Compliance Center at https://protection.office.com, click Reports > Dashboard. Select one of the reports that are available on the page: DLP reports: DLP policy matches and DLP false positives and overrides. ATP reports: ATP file types, ATP message disposition, and Threat protection status. EOP reports: Malware detections, Top malware, Top senders and recipients, Spoof mail, Spam detections, and Sent and received mail. 檢視資料外洩防護報告View the reports for data loss prevention
檢視進階威脅保護與 Exchange Online Protection 的報告View reports for Advanced Threat Protection and Exchange Online Protection
使用 Microsoft Graph 的自訂報告Custom reports using Microsoft Graph
以程式設計方式建立報表中可用的 Office 365 系統管理中心使用 Microsoft GraphProgrammatically create the reports that are available in the Office 365 admin center by using Microsoft Graph
不適用n/a
使用 Microsoft Graph 中的 Office 365 流量報告的副主題The subtopics of Working with Office 365 usage reports in Microsoft Graph
使用報告 Web 服務的自訂報告Custom reports using reporting web services
以程式設計方式建立使用 REST/ODATA2 查詢篩選報告指令程式可用 Exchange Online PowerShell 中的報告。Programmatically create reports from the available Exchange Online PowerShell reporting cmdlets by using REST/ODATA2 query filtering.
請注意: 許多原始 Exchange Online PowerShell 報告指令程式有已被取代的和取代為 Microsoft Graph 中相似的報表。如需詳細資訊,請參閱報告指令程式在 Exchange OnlineNote: Many of the original Exchange Online PowerShell reporting cmdlets have been deprecated and replaced by similar reports in Microsoft Graph. For more information, see Reporting cmdlets in Exchange Online.
https://reports.office365.com/ecp/reportingwebservice/reporting.svc
Office 365 報告 Web 服務Office 365 Reporting Web Services
Message traceMessage trace
為出差透過 Exchange Online 組織的線段電子郵件訊息。您可以決定電子郵件訊息若已接收、 拒絕、 延遲、 或服務所傳送。它也會顯示動作所採取的郵件上之前它達到其最終狀態。Follows email messages as they travel through your Exchange Online organization. You can determine if an email message was received, rejected, deferred, or delivered by the service. It also shows what actions were taken on the message before it reached its final status.
您可以使用這項資訊來快速回答使用者的問題、 疑難排解郵件流程問題、 驗證原則的變更,並連絡技術支援人員以取得協助的必要性。You can use this information to efficiently answer your user's questions, troubleshoot mail flow issues, validate policy changes, and alleviates the need to contact technical support for assistance.
在 Office 365 系統管理中心的https://portal.office.com/adminportal/home,按一下 [管理中心>Exchange。在 [新增 Exchange admin center 開啟] 頁面移至 [郵件流程>郵件追蹤。In the Office 365 admin center at https://portal.office.com/adminportal/home, click Admin centers > Exchange. In the new Exchange admin center page that opens, go to Mail flow > Message trace. 追蹤電子郵件訊息Trace an email message
了解如何使用郵件追蹤及其他工具進行疑難排解、 觀賞影片於找出並修正為商務系統的 Office 365 的電子郵件傳遞問題To learn how to use message trace and other tools for troubleshooting, watch the video at Find and fix email delivery issues as an Office 365 for business admin.
稽核記錄Audit logging
追蹤系統管理員對您的 Exchange Online 組織所做的特定變更。這些報告可協助您符合法規、規範和訴訟需求。Tracks specific changes made by admins to your Exchange Online organization. These reports help you meet regulatory, compliance, and litigation requirements.
在 Office 365 系統管理中心的https://portal.office.com/adminportal/home,按一下 [管理中心>Exchange Online Protection。在 [新增 Exchange admin center 開啟] 頁面移至 [相符性管理>稽核。In the Office 365 admin center at https://portal.office.com/adminportal/home, click Admin centers > Exchange Online Protection. In the new Exchange admin center page that opens, go to Compliance management > Auditing. Exchange 稽核報告Exchange auditing reports

報告和郵件追蹤資料的可用性與延遲Reporting and message trace data availability and latency

下表說明 Exchange Online 的報告和郵件追蹤資料何時可用及可用期間。The following table describes when Exchange Online reporting and message trace data is available and for how long.

報告類型 * * **Report type* 資料可用時間 (回顧期間) * * **Data available for (look back period)* 延遲 * * **Latency*
信箱摘要報告Mailbox summary reports
60 天60 days
郵件資料彙總大部分會在 24 到 48 小時內完成。部分次要的增量彙總變更最多存在 5 天。Message data aggregation is mostly complete within 24-48 hours. Some minor incremental aggregated changes may occur for up to 5 days.
郵件保護摘要報告Mail protection summary reports
90 天90 days
郵件資料彙總大部分會在 24 到 48 小時內完成。部分次要的增量彙總變更最多存在 5 天。Message data aggregation is mostly complete within 24-48 hours. Some minor incremental aggregated changes may occur for up to 5 days.
郵件保護詳細資料報告Mail protection detail reports
90 天90 days
少於 7 天的詳細資料,資料應該會出現在 24 小時內,但可能不會完成之前 48 小時。一些小幅累加變更可能會發生最多 5 天。For detail data that's less than 7 days old, data should appear within 24 hours but may not be complete until 48 hours. Some minor incremental changes may occur for up to 5 days.
若要檢視超過 7 天之郵件的詳細資料報告,結果可能需要幾個小時。To view detail reports for messages that are greater than 7 days old, results may take up to a few hours.
郵件追蹤資料Message trace data
90 天90 days
針對 7 天內的郵件執行郵件追蹤時,郵件應於 5 到 30 分鐘內出現。When you run a message trace for messages that are less than 7 days old, the messages should appear within 5-30 minutes.
針對超過 7 天的郵件執行郵件追蹤時,結果可能需要幾個小時。When you run a message trace for messages that are greater than 7 days old, results may take up to a few hours.

注意

資料可用性和延遲性都相同是否透過 Office 365 系統管理中心或遠端 PowerShell 來要求。Data availability and latency is the same whether requested via the Office 365 admin center or remote PowerShell.