Feedback Edit

Mail flow map in the Security & Compliance Center

  • Article
  • 2 minutes to read

Tip

Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub. Learn about who can sign up and trial terms here.

Applies to

The Mail flow map in the Security & Compliance Center gives insight as to how mail flows through your organization. You can use this information to learn patterns, identify anomalies, and fix issues as they occur.

The Mail flow map widget in the Mail flow dashboard in the Security & Compliance Center

By default, the widget shows the mail flow pattern from the previous day in a chart known as a Sankey diagram. You can use the left arrow Left arrow. and right arrow Right arrow to show information from different days. Each different color represents mail flow over a different inbound or outbound connector (or without using connectors). If you hover over a specific color, the number of messages is displayed for that type of connector.

Report view for the Mail flow map

Clicking on the Mail flow map widget will take you to the Mail flow map report.

The following charts are available in the report view:

  • Show data for: Overview: This is basically a larger view of the widget. If you hover over a specific color, the number of messages is displayed for that type of connector.

    The Overview view in the Mail flow map report

  • Show data for: Detail: This view shows details about the connectors and destination domains. The top sender and recipient domains are listed, and the rest are put in Others. If you hover over a specific color and section, the number of messages is displayed.

    The Detail view in the Mail flow map report

If you click Filters in a report view, you can specify a date range with Start date and End date.

To email the report for a specific date range to one or more recipients, click Request download.

Related insights are shown beneath the Mail flow map if they're available (for example, the Fix possible mail loop insight.

Details table view for the Mail flow map

If you click View details table in a report view, the following information is shown:

  • Date
  • Category
  • Connector / Third-party service provider
  • Sender/Recipient domain
  • Message count

If you click Filters in a details table view, you can specify a date range with Start date and End date.

If you select a row, similar details are shown in a flyout:

The Details flyout from the details table in the Mail flow map

To email the report for a specific date range to one or more recipients, click Request download.

To go back to the reports view, click View report.

See also

For information about other insights in the Mail flow dashboard, see Mail flow insights in the Security & Compliance Center.