Mail flow map in the Security & Compliance Center
Tip
Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub. Learn about who can sign up and trial terms here.
Applies to
- Exchange Online Protection
- Microsoft Defender for Office 365 plan 1 and plan 2
- Microsoft 365 Defender
The Mail flow map in the Security & Compliance Center gives insight as to how mail flows through your organization. You can use this information to learn patterns, identify anomalies, and fix issues as they occur.
By default, the widget shows the mail flow pattern from the previous day in a chart known as a Sankey diagram. You can use the left arrow and right arrow
to show information from different days. Each different color represents mail flow over a different inbound or outbound connector (or without using connectors). If you hover over a specific color, the number of messages is displayed for that type of connector.
Report view for the Mail flow map
Clicking on the Mail flow map widget will take you to the Mail flow map report.
The following charts are available in the report view:
Show data for: Overview: This is basically a larger view of the widget. If you hover over a specific color, the number of messages is displayed for that type of connector.
Show data for: Detail: This view shows details about the connectors and destination domains. The top sender and recipient domains are listed, and the rest are put in Others. If you hover over a specific color and section, the number of messages is displayed.
If you click Filters in a report view, you can specify a date range with Start date and End date.
To email the report for a specific date range to one or more recipients, click Request download.
Related insights are shown beneath the Mail flow map if they're available (for example, the Fix possible mail loop insight.
Details table view for the Mail flow map
If you click View details table in a report view, the following information is shown:
- Date
- Category
- Connector / Third-party service provider
- Sender/Recipient domain
- Message count
If you click Filters in a details table view, you can specify a date range with Start date and End date.
If you select a row, similar details are shown in a flyout:
To email the report for a specific date range to one or more recipients, click Request download.
To go back to the reports view, click View report.
See also
For information about other mail flow insights, see Mail flow insights in Exchange Online.
Feedback
Submit and view feedback for