Important: Google Workspace is updating the schema and event modeling for several log events. The improvements aim to make the logs more understandable, detailed, and precise. If you …

Depending on your Google Workspace edition, you might have access to the security investigation tool, which has more advanced features. For example, super admins can identify, …

As your organization's administrator, you can run searches and take action on security issues related to Admin data action log events. You can view a record of actions performed in the …

Depending on your Google Workspace edition, you might have access to the security investigation tool, which has more advanced features. For example, super admins can identify, …

Access Evaluation log events See how client applications access user data Depending on your Google Workspace edition, you might have access to the security investigation tool, which has …

Use Email Log Search (ELS) to find, and review details about, email messages sent and received by people in your organization. You can find all messages, or search for specific messages by …

To sign out of your Google Account on your own device, go here instead. As an administrator, you can sign a user out of a managed Google Account, such as Google Workspace or Cloud Identity.

Retrieving report or log events data for older dates or a wide time range might take so long that by the time results are available, the most recent log data might no longer be fresh. For tools that …

Gmail log events As your organization's administrator, you can use the security investigation tool to run searches related to Gmail log events, and to take action based on search results.

From a Google Workspace user to a non-Google email provider—Confirm that the message appears in ELS, which means it was sent successfully. Then, check with the receiving domain …