Graph API Mail Flow reporting

Question

Hi,

I am currently querying various API's so that I can automate the extracting of data to Azure storage.

I have thus far been able to pull sentinel data, attack simulator data, vulnerability data etc via the respective API's.

I am looking now to query Mail Trace data and in particular I am looking for a breakdown of mail flow for a 30 day period. All I need is a count of how many emails were delivered, rejected, spammed etc.

The documentation on the various possibilities here is all over the place. Has anyone been able to query such data and if so what's the current recommended API for this? The reporting web service seems to be deprecated for the most part.

I have been able to successfully query https://graph.microsoft.com/v1.0/reports/getEmailActivityCounts(period='D7') as per https://learn.microsoft.com/en-us/graph/api/reportroot-getemailactivitycounts?view=graph-rest-1.0&tabs=http but this does not give me any useful data. Any help here from the community would be appreciated :)

Answer 1

The reporting web service and/or PowerShell are your options here. Nothing regarding mail flow is exposed within the Graph API, either under the reporting endpoints or otherwise. Get-MessageTrace should get you started and also these:

Get-Command Get-Mail*Report

Get-MailboxActivityReport
Get-MailboxUsageDetailReport
Get-MailboxUsageReport
Get-MailDetailATPReport
Get-MailDetailDlpPolicyReport
Get-MailDetailEncryptionReport
Get-MailDetailEvaluationModeReport
Get-MailDetailTransportRuleReport
Get-MailFilterListReport
Get-MailFlowStatusReport
Get-MailTrafficATPReport
Get-MailTrafficEncryptionReport
Get-MailTrafficPolicyReport
Get-MailTrafficSummaryReport