| #

## Viewing Search & Destroy Event Logs

ScanMail records detailed event tracking logs for Search & Destroy. Because Search & Destroy allows administrators to view and delete Exchange components from users’ mailboxes, a comprehensive audit trail of Search & Destroy operations may be useful in case of user misunderstandings.

### Procedure

1. Go to Logs → Query.
   The Log Query screen appears.
2. Specify the dates to search.
3. In the Type drop-down, select Event Tracking.
4. Select the user account(s) for ScanMail to locate and click Add.
5. Select Search & Destroy logs beside Log type.
6. From the drop-down beside Search & Destroy logs, select from the following events:
   - All
   - Configuration change
   - Operation
   - Task status change
7. Optionally, type a description for the logs.
8. Specify the Sort by and Display options.
9. Click Display Logs.