Caution: The Investigation Tool returns 180 days of data from all logs. Gmail log search does have a limit of 30 days unless you have the message ID and recipient email address. You can export Google Workspace logs and usage reports to Big Query. Over time, this gives you access to data past the 30 day/6 month window. See Export your Google Logs to BigQuery for a Big Win.
Build a search
To build out searches in the investigation tool:
- Start with a data source.
- Define your conditions.
- (Optional) Organize your results with group-by or click a data item to pivot to a new search.
- Take action directly within the tool or export your findings to Sheets.
Note: You will need to select one or more search result rows for the ACTIONS menu to appear and allow you to choose what changes to make.
|Description of Change