Email metrics

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read

    • Analyze your email metrics to look for anomalous behaviors that are related to the incoming emails to your instance. For example, if the metrics indicate a spike in spam emails from specific domains, you can define inbound actions that prevent their delivery to the instance.

    For each email metric, a count appears for each type of email that is delivered or sent to the instance during the calendar day.

    Notification preference Description
    External Incoming Email Number of incoming emails for the calendar day that were delivered to the instance from external email domains.
    Note:
    The external email domains are those domains that are not listed in the security.list.internal.domains system property, because this property tracks only your internal email domains. To learn more about this property, see Available system properties.
    Spam Number of incoming emails for the calendar day that were delivered to the instance and marked as spam. A number that is out of line with historical trends may indicate that attempts are being made to compromise your instance security.
    Trusted Incoming Email Number of incoming emails to the instance for the calendar day from email domains designated as trusted.
    Untrusted Incoming Email Number of incoming emails to the instance for the calendar day from email domains designated as untrusted.

    You can designate untrusted or trusted email domains in the Untrusted And Trusted Domain form so that you can track your inbound emails that are sent from them. To learn how to designate untrusted or trusted email domains, see Designate email domains as untrusted or trusted.
    After you click an email metric, you can learn about the possible email security issues in your instance by clicking one of the following:
    Command Description
    Chart Incoming email counts and count trends over time for the selected email type (spam, incoming external, untrusted, or trusted).
    Records Individual email records that compromise the daily count for the selected email type.
    More Info Additional information for the selected email type.
    Note:
    The email metrics apply only to your incoming emails to the instance. The metrics do not apply to the normal traffic that is processed through your enterprise-wide email servers. To learn about defining inbound actions and how they impact the processing of your inbound emails, see Inbound email actions.