From Dashboard and Alerts to Investigations

Caution: The Investigation Tool returns 30 days of data from Gmail logs and 180 days of data from all other logs. You can export Google Workspace logs and usage reports to Big Query. Over time this gives you access to data past the 6 month window. See Export your Google Logs to BigQuery for a Big Win.

From Alerts to investigations

You can launch into the investigation tool from the alert center by simply clicking the investigation tool icon (magnifying glass), which pre-populates and opens in a new tab automatically.

From Security Dashboard to investigations

The Security Dashboard may surface trends or issues that you want to investigate further. You can pivot to the Investigation Tool directly from the dashboard.


In the bottom right of each chart, you will see either Investigate or View Report. Choose Investigate and a search will be automatically built for you in the investigation tool. If you see View Report, then the chart provides the ability to export data to Sheets in lieu of launching into an investigation. 


Document Version Date Description of Change


Articles in this section