Email Header

[Adrian Tacaciu]

Hello 

I

s there a way to get the header of a email a user in my workspace recived like a week ago?

Thanks

[Ross Scroggs]

Adrian,

With Advanced GAM you would do something like this:

gam user us...@domain.com show messages query "after:2022-07-20 before:2022-07-27" 

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3d0f934d-410a-4ad3-8302-d83dbe852dabn%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com

[Adrian Tacaciu]

It does't give me the Headers I need. I need something that can go in the Google Admin ToolBox Messageheader analyzer.

Usually if u click on "show original" in an email it shows you a long header that can be analyzed but I can't do that for a user in my organization.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS90QxK%3D%3Dggy-3dhPuUAhjk9018ToDF_ke5%3DKhnAfb-M_A%40mail.gmail.com.

[Ajo Jose]

Even i am in need of the same!!

[Ajo Jose]

My requirement is more like when we do email log search we usually dont get the message headers ,we only gets the details yet sometimes we need the message header inorder to investigate further.

As you all are aware of we can get this message headers if it was delivered to quarantine beacuse there is an option to do so, so is there a way to get the message header of the emails which are visible in email log search using gam or any other methods.

[Adrian Tacaciu]

Exactly. That's what I'm looking for :D

[NEWMAN, P]

Hi,

If you have access to Vault then you can get the full headers of an email by using show original on any email you have found in the vault.

There may be a way to do it with GAM but I don't know it.

many thanks

Piers

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/20d7d529-0874-4835-8e82-58b341400b8dn%40googlegroups.com.

--

Piers Newman

Network Technician

 

[Ajo Jose]

Hi,

That's true, but most of the time the clients will be using a starter plan in my case so, the vault wouldn't be an apt option for them.

[Ajo Jose]

Also, we are focusing on undelivered emails here because that is where we need to do investigation a lot of times and in those cases we wouldnt be able to collect message header from the  recepients but we can ask the sender to share the details even then in some cases the sender might be third party CRM application or something were we will be having no message headers from either side so if we have to do investigation on those, even the  google team asks for the message header so if we can get from log search somehow that could be great,

and i dont think vault can give the message headers of undelivered emails.

[Ross Scroggs]

Adrian,

Here's the ADvanced GAM documentation: https://github.com/taers232c/GAMADV-XTD3/wiki/Users-Gmail-Messages-Threads#choose-information-to-display

You can get all SMTP headers with: headers all

You can get selected SMTP headers with: headers <SMTPHeaderLIst>

Ross

--

ross.s...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAE4Q1MkxaJvZ6c66PJOBUiEyPv5v0Jgm%2BkAJXiES1goKhFt_Ow%40mail.gmail.com.

[Adrian Tacaciu]

Thank you. That helped :) the output is not in the correct format for https://toolbox.googleapps.com/apps/messageheader/analyzeheader but I made it work

[Ajo Jose]

Hi Ross,

while I am running the command gam user us...@domain.com show messages query "after:2022-07-20 before:2022-07-27"   i am getting the error as  messages is not a valid argument for "gam <users> show"

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/AtCrS-4ehT8/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/96d66341-fe3c-4903-b659-9627a56ae9fen%40googlegroups.com.

--

[Ross Scroggs]

You are running Standard GAM, show messages is an Advanced GAM command.

See: https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAKjbwDcr8qtA%2By6xVs-806vVNKj2354mAsuvwYsa0iQ-Bt4Vvg%40mail.gmail.com.