mail - Email

This group includes tags that start with the level mail. These tags identify data generated by email servers.

Company	Product / Service	Data tables

Company	Product / Service	Data tables
	Abnormal Security	`mail.abnormalsecurity.cases` `mail.abnormalsecurity.threats` More information
	Cisco Email Security Appliance	`mail.cisco.esa.amp` `mail.cisco.esa.antispam` `mail.cisco.esa.antivirus` `mail.cisco.esa.authentication` `mail.cisco.esa.delivery` `mail.cisco.esa.encryption` `mail.cisco.esa.euq` `mail.cisco.esa.graymail` `mail.cisco.esa.scanning` `mail.cisco.esa.sdr` `mail.cisco.esa.status` `mail.cisco.esa.stdout` `mail.cisco.esa.system` `mail.cisco.esa.text_mail` `mail.cisco.esa.threatfeeds` More information
	Darktrace Email	`mail.darktrace.detect_respond.event` More information
	Dovecot email server	`mail.dovecot.audit` More information
	Egress Secure Mail	`mail.egress.defend.phising_events` More information
	Microsoft Exchange Server	`mail.exchange.messagetracking` `mail.exchange.ncsa` `mail.exchange.w3c` More information
	FortiMail: Secure Email Gateway	`mail.fortinet.event.admin` `mail.fortinet.event.config` `mail.fortinet.event.ha` `mail.fortinet.event.smtp` `mail.fortinet.event.update` `mail.fortinet.spam` `mail.fortinet.statistics` `mail.fortinet.virus.infected` More information
	Fortra’s Agari Phishing Defense	`mail.agari.phishing_defense.policy_events` `mail.agari.phishing_defense.messages` More information
	Gmail	`mail.google.gmail.metadata` More information
	Google Apps	`mail.googleapps.gat.audit` `mail.googleapps.gat.auditDetached` `mail.googleapps.gat.login` More information
	KnowBe4	`mail.knowbe4.phisher.webhooks` More information
	McAfee Email Gateway	`mail.mcafee.emailgateway` More information
	Mimecast Secure Email Gateway Mimecast Targeted Threat Protection	`mail.mimecast.account.dashboard` `mail.mimecast.archive` `mail.mimecast.archive.messageview` `mail.mimecast.archive.search` `mail.mimecast.audit.events` `mail.mimecast.message.list` `mail.mimecast.message.summary` `mail.mimecast.siem` `mail.mimecast.siem.av` `mail.mimecast.siem.delivery` `mail.mimecast.siem.iep` `mail.mimecast.siem.impersonation` `mail.mimecast.siem.jrnl` `mail.mimecast.siem.process` `mail.mimecast.siem.receipt` `mail.mimecast.siem.spameventthread` `mail.mimecast.siem.ttp` `mail.mimecast.thread.feed` `mail.mimecast.ttp` `mail.mimecast.ttp.attachment` `mail.mimecast.ttp.attachment_protect` `mail.mimecast.ttp.impersonation` `mail.mimecast.ttp.url` More information
	Postfix mail server	`mail.postfix` More information
	Proofpoint Email Protection	`mail.proofpoint.pod` `mail.proofpoint.pod.events` `mail.proofpoint.pod.isolation` `mail.proofpoint.pod.maillog` `mail.proofpoint.pod.message` `mail.proofpoint.sendmail` `mail.proofpoint.stdout` `mail.proofpoint.tapsiem` `mail.proofpoint.tapsiem_syslog` `mail.proofpoint.tapsiem_v2` `mail.proofpoint.trap` `mail.proofpoint.trap_incident` More information
-	Simple Mail Transfer Protocol (SMTP)	`mail.smtp.as400alerts` `mail.smtp.dlp` `mail.smtp.general` `mail.smtp.imssPolevt` `mail.smtp.spamEti` `mail.smtp.spamSpain` `mail.smtp.spamTis` `mail.smtp.spamTrap` More information
	Symantec Email Security Cloud	`mail.symantec.email_security_cloud.all_email` `mail.symantec.email_security_cloud.anti_spam` `mail.symantec.email_security_cloud.clicktime` `mail.symantec.email_security_cloud.ec_report` `mail.symantec.email_security_cloud.email_delivery` `mail.symantec.email_security_cloud.isolation` `mail.symantec.email_security_cloud.malware` More information
	Trellix FireEye ETP	`mail.trellix.etp.alert_summary` `mail.trellix.etp.email_trace` `mail.trellix.etp.user_activity_search` `mail.trellix.etp.statistic` More information
	Trend Micro InterScan Messaging Security Suite (IMSS)	`mail.trend_micro.email_security.directory_user` `mail.trend_micro.email_security.mail_tracking` `mail.trend_micro.email_security.policy_event` More information