How to find the sender of the email.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-10-2015 11:28 AM
We have some junk emails coming to our instance. We want to figure out the sender of the email. Please let me know if there is a way to find the sender of the email within service now
Thanks,

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-10-2015 11:46 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-10-2015 12:09 PM
Hi Sandhya,
In an inbound action
http://wiki.servicenow.com/?title=Inbound_Email_Actions#Accessing_Email_Objects_with_Variables
6 Accessing Email Objects with Variables
..
email.from
Contains an email address according to the following conditions. If the address listed in the email Headers field matches an existing user's Email address, this variable contains the user's Email address. If the address listed in the email Headers field does not match an existing user's Email address, this variable contains the address listed in the email Headers field (starting with Eureka Patch 5) or the Guest user's Email address (in versions prior to Eureka Patch 5).
..
email.origemail
Contains the email sender's address as listed in the email Headers.
Also you might be interested in email filters in general
Email Filters - ServiceNow Wiki
and specifically
2.1 SPAM Scoring
Every message sent through ServiceNow email servers is assessed for the likelihood of being spam. Based on this assessment, ServiceNow adds headers to each message that can be used for filtering within the customer instance using the Email Filters plugin. This is only available for instances that use the ServiceNow email infrastructure. See KB0549426 for more information.
Best Regards
Tony
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-11-2015 07:29 AM
Hi Sandhya,
1. Go to System Logs -> Emails
2. Group by "Type" (if Type is not available then add it by personalizing the list)
3. select any one of the mail from received Type.
4. scroll down for Header section.
in Header section you will see 1st line with Return-Path:<abc.xyz@efg.com>
see below screenshot.
All the best..
Regards,
Shashank Joshi

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-11-2015 07:38 AM
Hi Sandhya,
Open the email log and check the third field on the form-
If the sender email ID is there in your system then 'UserID' reference field will show you the sender.
If the sender is not there then you can get the email ID the email is sent from in the 'User' text field.
Thanks,
Tanaji