---
title: "mail - Email"
canonical: "https://docs.devo.com/space/latest/94662094/mail%20-%20Email"
format: markdown
---
This group includes tags that start with the level `mail`. These tags identify data generated by email servers.

| **Company** | **Product / Service** | **Data tables** |
| --- | --- | --- |
| ![image](media://a1002ca4-cc87-4c8d-a5cc-8d8308fb9edc) | Abnormal Security | - `mail.abnormalsecurity.cases`
- `mail.abnormalsecurity.threats`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356581394) |
| ![image](media://22481a6d-cd93-4757-b1f9-b516e7d9d0c4) | Cisco Email Security Appliance | - `mail.cisco.esa.amp`
- `mail.cisco.esa.antispam`
- `mail.cisco.esa.antivirus`
- `mail.cisco.esa.authentication`
- `mail.cisco.esa.delivery`
- `mail.cisco.esa.encryption`
- `mail.cisco.esa.euq`
- `mail.cisco.esa.graymail`
- `mail.cisco.esa.scanning`
- `mail.cisco.esa.sdr`
- `mail.cisco.esa.status`
- `mail.cisco.esa.stdout`
- `mail.cisco.esa.system`
- `mail.cisco.esa.text_mail`
- `mail.cisco.esa.threatfeeds`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356646926) |
| ![image-20240212-084630.png](media://e916c835-364a-4dda-9af1-3122e388199c) | Darktrace Email | - `mail.darktrace.detect_respond.event`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/497975301) |
| ![image](media://648cbf58-2624-4215-b810-59418de5eb52) | Dovecot email server | - `mail.dovecot.audit`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356909076) |
| ![image](media://59f07ee0-b871-4d2d-98e4-9e62c723fb3b) | Egress Secure Mail | - `mail.egress.defend.phising_events`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356679711) |
| ![image](media://92571a99-3f44-432c-9337-bba56cc06423) | Microsoft Exchange Server | - `mail.exchange.messagetracking`
- `mail.exchange.ncsa`
- `mail.exchange.w3c`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356941834) |
| ![image](media://7e173e47-3c38-48dc-a82d-58074eefb26e) | FortiMail: Secure Email Gateway | - `mail.fortinet.event.admin`
- `mail.fortinet.event.config`
- `mail.fortinet.event.ha`
- `mail.fortinet.event.smtp`
- `mail.fortinet.event.update`
- `mail.fortinet.spam`
- `mail.fortinet.statistics`
- `mail.fortinet.virus.infected`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356679723) |
| ![image](media://b08cb078-be3a-4fb7-bf61-262eb84b9b39) | Fortra’s Agari Phishing Defense | - `mail.agari.phishing_defense.policy_events`
- `mail.agari.phishing_defense.messages`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/94662245) |
| ![image](media://946b9487-a8fa-4b79-80fa-33314039a663) | Gmail | - `mail.google.gmail.metadata`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/231145542) |
| Google Apps | - `mail.googleapps.gat.audit`
- `mail.googleapps.gat.auditDetached`
- `mail.googleapps.gat.login`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356614179) |
| ![image](media://9091db96-58b6-414d-907a-35b381b0411b) | KnowBe4 | - `mail.knowbe4.phisher.webhooks`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/94662207) |
| ![image](media://d79ef31d-4ea1-4888-862e-2905e5f1265b) | McAfee Email Gateway | - `mail.mcafee.emailgateway`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356646954) |
| ![image](media://bcb1b46f-a1c2-483b-ab83-7e4fc55f11dc) | Mimecast Secure Email Gateway  
Mimecast Targeted Threat Protection | - `mail.mimecast.account.dashboard`
- `mail.mimecast.archive`
- `mail.mimecast.archive.messageview`
- `mail.mimecast.archive.search`
- `mail.mimecast.audit.events`
- `mail.mimecast.message.list`
- `mail.mimecast.message.summary`
- `mail.mimecast.siem`
- `mail.mimecast.siem.av`
- `mail.mimecast.siem.delivery`
- `mail.mimecast.siem.iep`
- `mail.mimecast.siem.impersonation`
- `mail.mimecast.siem.jrnl`
- `mail.mimecast.siem.process`
- `mail.mimecast.siem.receipt`
- `mail.mimecast.siem.spameventthread`
- `mail.mimecast.siem.ttp`
- `mail.mimecast.thread.feed`
- `mail.mimecast.ttp`
- `mail.mimecast.ttp.attachment`
- `mail.mimecast.ttp.attachment_protect`
- `mail.mimecast.ttp.impersonation`
- `mail.mimecast.ttp.url`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/94662225) |
| ![image](media://5fef9793-be1f-4a64-b216-909adbcdc63f) | Postfix mail server | - `mail.postfix`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356778104) |
| ![image](media://7a1c8064-506c-467b-8360-84e6ea5ad567) | Proofpoint Email Protection | - `mail.proofpoint.pod`
- `mail.proofpoint.pod.events`
- `mail.proofpoint.pod.isolation`
- `mail.proofpoint.pod.maillog`
- `mail.proofpoint.pod.message`
- `mail.proofpoint.sendmail`
- `mail.proofpoint.stdout`
- `mail.proofpoint.tapsiem`
- `mail.proofpoint.tapsiem_syslog`
- `mail.proofpoint.tapsiem_v2`
- `mail.proofpoint.trap`
- `mail.proofpoint.trap_incident`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/94662170) |
| - | Simple Mail Transfer Protocol (SMTP) | - `mail.smtp.as400alerts`
- `mail.smtp.dlp`
- `mail.smtp.general`
- `mail.smtp.imssPolevt`
- `mail.smtp.spamEti`
- `mail.smtp.spamSpain`
- `mail.smtp.spamTis`
- `mail.smtp.spamTrap`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/357335045) |
| ![image-20240718-131210.png](media://7a2146bf-86d4-4941-bf74-bcfc5fa4ceca) | Symantec Email Security Cloud | - `mail.symantec.email_security_cloud.all_email`
- `mail.symantec.email_security_cloud.anti_spam`
- `mail.symantec.email_security_cloud.clicktime`
- `mail.symantec.email_security_cloud.ec_report`
- `mail.symantec.email_security_cloud.email_delivery`
- `mail.symantec.email_security_cloud.isolation`
- `mail.symantec.email_security_cloud.malware`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/730366001) |
| ![image](media://875a8f8b-f841-4ece-85f9-6ff642628c69) | Trellix FireEye ETP | - `mail.trellix.etp.alert_summary`
- `mail.trellix.etp.email_trace`
- `mail.trellix.etp.user_activity_search`
- `mail.trellix.etp.statistic`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/426737863) |
| ![image](media://acb4fa46-270f-4726-b057-136718f4b1ca) | Trend Micro InterScan Messaging Security Suite (IMSS) | - `mail.trend_micro.email_security.directory_user`
- `mail.trend_micro.email_security.mail_tracking`
- `mail.trend_micro.email_security.policy_event`<br>[More information](https://devodocs.atlassian.net/wiki/spaces/latest/pages/356581468) |