Identifying and exporting messages for deletion

Using Gopher for Gmail's Bulk Purge Emails feature requires a search results set, output as a CSV file, from the Email Log Search tool in the G Suite Admin Console.

Note: It is important to be aware of the size limitations of Email Log Search outputs.  We believe that in most school use-cases (<5000 recipients on the same message), these limitations should not be a problem, however in very large scale send scenarios, it is possible a more robust, scripted approach could be necessary.  The Amplified IT Technical Services team has alternatives available in these scenarios.  Alternatively, you can upvote the addition of the "Bulk search / delete message by ID for all domain users" feature on our roadmap.

Identifying messages using Email Log Search

Any given email(s) you want to target for deletion, whether spam, phishing attack, or inappropriate / accidental send, will have some combination of details that make it queryable with the Email Log Search tool (shown below).  Some additional, useful fields for narrowing search include Message ID, Sender IP, and Recipient IP.

Screen_Shot_2018-01-29_at_12.52.38_PM.png

These additional message details can be revealed by selecting Show original within the Gmail message interface.

Screen_Shot_2018-01-29_at_12.42.13_PM.png
Original_Message.png

 

Exporting Email Log Search Results

Once you've positively identified the offending messages via Email Log Search query, export them in CSV format as shown below.

export-log-search-results.png