How to track who approved or denied emails in the quarantine console ( ONLY)

Answer

1. Obtain the message ID from the email(s) in question. This can be done from message tracking or from the headers of the actual email.
2. Take note of the message ID and navigate to the following log file:

• 2014 and previous: ...GFI\MailEssentials\Antispam\DebugLogs\QuarQA.log
• 2014 R2 and later: ...GFI\MailEssentials\Antispam\DebugLogs\QuarQA.log

1. Run a search for the message ID. Alongside it, you will find the Quar ID.
2. Take note of the Quar ID and navigate to the following log file:

• ...GFI\MailEssentials\wwwconf\debuglogs\QuarWeb.log

1. Search within the QuarWeb for the Quar ID. Scroll up and you will see everything that was done by that Quar ID.