Caution: The Investigation Tool returns 30 days of data from Gmail logs and 180 days of data from all other logs. You can export Google Workspace logs and usage reports to Big Query. Over time this gives you access to data past the 6 month window. See Export your Google Logs to BigQuery for a Big Win.
Save an investigation
After you create an investigation, click the save icon, type a title and description for the investigation, then click save.
Share an investigation with others
In the investigation tool, save a new investigation or click an existing investigation to open it.
- Open the saved investigation by clicking on the file folder icon.
- Click Share.
- Enter the usernames of people you want to share the investigation with.
- Click Save Changes.
Change ownership of investigations
Once you create an investigation, you are the owner of that investigation by default. You can share the investigation with others but you can also transfer ownership to another teammate, which will downgrade your access to view only (not owner).
To change ownership:
- In the investigation tool, click an investigation to open it and click the Share icon.
- Change the permission of an existing shared user from Viewer to Owner.