Trace and query all messages.

​
Basic Parameters

ParameterDescription
RecipientThe E-mail address of the recipient of the message.
SenderThe E-mail address of the sender of the message.
SubjectThe subject of the message.

​
Advanced Parameters

ParameterDescription
AttachmentsA comma-separated list of the attachment of the message.
CountThe amount of messages returned in the call.
End TimeThe ending time of the query window.
GUIDThe GUID of the message.
HostThe host or IP address of the sent message.
Message ActionThe final disposition action of the message.
Message IDThe header ID of the message(corresponds to the Message ID field in the UI).
Queue IDThe ID of the message queue.
SIDThe SID of the message.
Start TimeThe starting time of the query window.
VirusesA comma-separated list of the viruses detected in the message.

​
Example Output

{
	"result": [
		{
			"Raw_Log": "<string>",
			"SendmailRaw_Log": "<string>",
			"QID": "<string>",
			"Sender": "<string>",
			"Attachment_Names": "<string>",
			"Sendmail_To_Stat": "<string>",
			"Quarantine_Rule": "<string>",
			"Message_ID": "<string>",
			"Sender_IP_Address": "<string>",
			"Disposition_SmtpProfile": "<string>",
			"SMIME_Recipients_Signed": "<string>",
			"Rule_ID": "<string>",
			"SID": "<string>",
			"Sendmail_To": "<string>",
			"Policy_Routes": "<string>",
			"FID": "<string>",
			"Disposition_Action": "<string>",
			"Message_Split": "<string>",
			"Quarantine_Folder": "<string>",
			"Message_Encrypted": "<string>",
			"Date": "2025-04-28 12:54:29 [UTC-0700]",
			"Virus_Names": "<string>",
			"Subject": "<string>",
			"SMIME_Recipients": "<string>",
			"Agent": "<string>",
			"Spam_Score": 1,
			"Suborg": "<string>",
			"Final_Rule": "<string>",
			"TLS": "<string>",
			"Final_Action": "<string>",
			"GUID": "<string>",
			"Message_Size": 42413,
			"FQIN": "<string>",
			"Sender_Host": "<string>",
			"Module_ID": "<string>",
			"Sendmail_Action": "<string>",
			"Sendmail_Stat": "<string>",
			"Recipients": "<string>",
			"Duration": 1,
			"Sendmail_Errorcode": "<string>",
			"PE_Recipients": "<string>"
		},
		{
			"Sendmail_Errorcode": "<string>",
			"PE_Recipients": "<string>",
			"Duration": 1,
			"Sendmail_Stat": "<string>",
			"Recipients": "<string>",
			"Sendmail_Action": "<string>",
			"Module_ID": "<string>",
			"Sender_Host": "<string>",
			"Message_Size": 17576,
			"GUID": "<string>",
			"FQIN": "<string>",
			"Final_Action": "<string>",
			"TLS": "<string>",
			"Suborg": "<string>",
			"Final_Rule": "<string>",
			"SMIME_Recipients": "<string>",
			"Spam_Score": 0,
			"Agent": "<string>",
			"Date": "2025-04-28 12:54:29 [UTC-0700]",
			"Virus_Names": "<string>",
			"Subject": "<string>",
			"Message_Encrypted": "<string>",
			"Disposition_Action": "<string>",
			"Message_Split": "<string>",
			"FID": "<string>",
			"Quarantine_Folder": "<string>",
			"Disposition_SmtpProfile": "<string>",
			"Sendmail_To": "<string>",
			"Policy_Routes": "<string>",
			"SID": "<string>",
			"SMIME_Recipients_Signed": "<string>",
			"Rule_ID": "<string>",
			"Sender_IP_Address": "<string>",
			"Sendmail_To_Stat": "<string>",
			"Message_ID": "<string>",
			"Quarantine_Rule": "<string>",
			"QID": "<string>",
			"Raw_Log": "<string>",
			"SendmailRaw_Log": "<string>",
			"Sender": "<string>",
			"Attachment_Names": "<string>"
		}
	]
}

​
Workflow Library Example

Smart Search with Proofpoint Protection Server and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop