How do I monitor messages based on their content in my Exchange Online environment?

There are several reasons for which you, as an Exchange admin, need to identify emails with certain words in their content. You need to monitor your users' email content to:

  • Identify the source of a data leak during internal investigations.
  • Detect spam emails.
  • Locate emails with malicious attachments.

However, using the native tools to locate emails based on content keywords is no simple task.


Exchange Reporter Plus provides the following three Exchange Online content reports that help you locate emails based on keywords.

  • Folder Message Count and Size
  • Attachment by File Size
  • Messages by Subject

The Messages by Subject report (Fig. 1) shows you detailed information such as the subject of a message, its size, from and to IP addresses, and more.

Messages by Subject report
Figure 1: The Messages by Subject report of Exchange Reporter Plus.

With this information by your side, you can remain vigilant about the messages being sent and received by your organization's employees.

Explore the other reporting, change auditing, and monitoring functionalities of Exchange Reporter Plus today.


Request Support

Need further assistance? Fill this form, and we'll contact you rightaway.

Exchange Reporter Plus trusted by

A single pane of glass for Exchange Server Monitoring, Reporting and Auditing