Select ManageConfigurationSaaS SecuritySettingsMonitor Actions Taken by SaaS Security.
Filter the audit logs as needed.
Enter an email in the search bar to filter the audit logs by user
email.
Specify the time frame Duration you want to
investigate. You can select Past 24 Hours,
Past 7 Days, Past 30
Days, Past 90 Days, or
Past 1 Year.
Filter the Email DLP audit logs based on the
Event you want to investigate. The common
Email DLP events are Create,
Update, Delete,
and Download.
Review your Email DLP audit logs.
In the Resources column, allSaaS Security
prepends all Email DLP events with Email. For
example, Email Policy, Email
Content, and Email Evidence
Storage.