> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Smart Search

Trace and query all messages.

## Basic Parameters

<div className="integrations-table">
  | Parameter | Description                                         |
  | --------- | --------------------------------------------------- |
  | Recipient | The E-mail address of the recipient of the message. |
  | Sender    | The E-mail address of the sender of the message.    |
  | Subject   | The subject of the message.                         |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter      | Description                                                                  |
  | -------------- | ---------------------------------------------------------------------------- |
  | Attachments    | A comma-separated list of the attachment of the message.                     |
  | Count          | The amount of messages returned in the call.                                 |
  | End Time       | The ending time of the query window.                                         |
  | GUID           | The GUID of the message.                                                     |
  | Host           | The host or IP address of the sent message.                                  |
  | Message Action | The final disposition action of the message.                                 |
  | Message ID     | The header ID of the message(corresponds to the Message ID field in the UI). |
  | Queue ID       | The ID of the message queue.                                                 |
  | SID            | The SID of the message.                                                      |
  | Start Time     | The starting time of the query window.                                       |
  | Viruses        | A comma-separated list of the viruses detected in the message.               |
</div>

## Example Output

```json theme={"dark"}
{
	"result": [
		{
			"Raw_Log": "<string>",
			"SendmailRaw_Log": "<string>",
			"QID": "<string>",
			"Sender": "<string>",
			"Attachment_Names": "<string>",
			"Sendmail_To_Stat": "<string>",
			"Quarantine_Rule": "<string>",
			"Message_ID": "<string>",
			"Sender_IP_Address": "<string>",
			"Disposition_SmtpProfile": "<string>",
			"SMIME_Recipients_Signed": "<string>",
			"Rule_ID": "<string>",
			"SID": "<string>",
			"Sendmail_To": "<string>",
			"Policy_Routes": "<string>",
			"FID": "<string>",
			"Disposition_Action": "<string>",
			"Message_Split": "<string>",
			"Quarantine_Folder": "<string>",
			"Message_Encrypted": "<string>",
			"Date": "2025-04-28 12:54:29 [UTC-0700]",
			"Virus_Names": "<string>",
			"Subject": "<string>",
			"SMIME_Recipients": "<string>",
			"Agent": "<string>",
			"Spam_Score": 1,
			"Suborg": "<string>",
			"Final_Rule": "<string>",
			"TLS": "<string>",
			"Final_Action": "<string>",
			"GUID": "<string>",
			"Message_Size": 42413,
			"FQIN": "<string>",
			"Sender_Host": "<string>",
			"Module_ID": "<string>",
			"Sendmail_Action": "<string>",
			"Sendmail_Stat": "<string>",
			"Recipients": "<string>",
			"Duration": 1,
			"Sendmail_Errorcode": "<string>",
			"PE_Recipients": "<string>"
		},
		{
			"Sendmail_Errorcode": "<string>",
			"PE_Recipients": "<string>",
			"Duration": 1,
			"Sendmail_Stat": "<string>",
			"Recipients": "<string>",
			"Sendmail_Action": "<string>",
			"Module_ID": "<string>",
			"Sender_Host": "<string>",
			"Message_Size": 17576,
			"GUID": "<string>",
			"FQIN": "<string>",
			"Final_Action": "<string>",
			"TLS": "<string>",
			"Suborg": "<string>",
			"Final_Rule": "<string>",
			"SMIME_Recipients": "<string>",
			"Spam_Score": 0,
			"Agent": "<string>",
			"Date": "2025-04-28 12:54:29 [UTC-0700]",
			"Virus_Names": "<string>",
			"Subject": "<string>",
			"Message_Encrypted": "<string>",
			"Disposition_Action": "<string>",
			"Message_Split": "<string>",
			"FID": "<string>",
			"Quarantine_Folder": "<string>",
			"Disposition_SmtpProfile": "<string>",
			"Sendmail_To": "<string>",
			"Policy_Routes": "<string>",
			"SID": "<string>",
			"SMIME_Recipients_Signed": "<string>",
			"Rule_ID": "<string>",
			"Sender_IP_Address": "<string>",
			"Sendmail_To_Stat": "<string>",
			"Message_ID": "<string>",
			"Quarantine_Rule": "<string>",
			"QID": "<string>",
			"Raw_Log": "<string>",
			"SendmailRaw_Log": "<string>",
			"Sender": "<string>",
			"Attachment_Names": "<string>"
		}
	]
}
```

## Workflow Library Example

[Smart Search with Proofpoint Protection Server and Send Results Via Email](https://library.blinkops.com/workflows/smart-search-with-proofpoint-protection-server-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/smart-search-with-proofpoint-protection-server-and-send-results-via-email/canvas" />
</div>