In addition to email notifications, you can view all the alerts generated by Netskope SMTP Proxy in your Netskope tenant.
- In the Netskope UI, navigate to Skope IT > Alerts.
- You can filter the alerts by specifying Microsoft Office 365 Exchange or Google Gmail in the Application Name filter.
Note
When using the “to_user” field in a query to filter alerts, use the “like” operator instead of “=” since the value of the “to_user” field relates to the SMTP header. The header contains a list of all recipients as compiled by the email client.
If you want an exact match using the “=” operator for a single email address, use “smtp_to” field to query alerts.
- Click on
icon next to an alert to view the alert details. The alert details provide information such as the from and to email addresses, application instance ID, DLP profiles that matched the content of the email and more.Note
Netskope DLP categorizes the body of the email as a text/plain file type under Alert Details because Outlook packages the email MIME as a container file.If the email contains attachments, then DLP determines the file type of the attachment.
Application Event Detail Keywords
| Field Name | Description | Sample Value |
| Message Size | The size of the email body plus attachments in KB. | 23 |
| User | The sender’s e-mail as specified in the SMTP envelope. | sender@foo.com |
| From User | The sender’s e-mail as specified in the e-mail header (the “from”). | do-no-reply@foo.com |
| To User | The recipients from the e-mail header, up to 1KB (the “to”). | alice@gmail.com |
| SMTP To | The recipients from the SMTP envelope. |