25.21.Microsoft 365 journaling
In this section, we will explain how to correctly set up the Journaling in Exchange Online. You can find more information about Microsoft 365 journaling here.
Before starting to set up the Microsoft 365 journaling:
- You need to be assigned permissions before you can perform these procedures. To see what permissions you need, see the “Journaling” entry in the article Feature permissions in Exchange Online.
- You need to have a journaling mailbox and an alternate journaling mailbox configured. For more details, see Configure Journaling in Exchange Online.
- There is a limit to the number of journal rules that you can create in Exchange Online. For details, see Journal, Transport, and Inbox rule limits.
- You can use either the Microsoft Purview compliance portal or the Classic Exchange admin center (EAC) to manage journaling in Exchange Online. Read more about the Manage journaling in Exchange Online here.
The following steps are required to set up the Exchange Online:
1) Log in to the Microsoft Purview compliance portal
2) From the navigation menu on the left select Data lifecycle management => Exchange (legacy)
3) On the Exchange (legacy) tab select Settings (the gear icon)
4) In Send undeliverable journal reports to enter the email address of a valid user account. Note that you cannot use a team or group address. This email address will be used for Undeliverable journal reports when they are not deliverable to the addresses specified in the journal rule. This email address can’t correspond with an Exchange Online mailbox.
It is also possible to replace this (alternative) mailbox on the same tab:
Select Save.
5) Navigate to the Journal Rules tab.
6) Create a new rule and fill out the following values:
-
a) Send journal reports to: specify an email address for an on-premises archiving system or third-party archiving service (in case of using the contentACCESS cloud, the journal mailbox domain is @smtp.contentACCESS.cloud)
b) Journal Rule Name: enter a journal name for the rule (recommendation: contentACCESS journaling rule)
c) Journal messages sent or received from: Everyone
d) Type of messages to journal: External messages only
7) Click Next.
8) Verify the information is correct and select Submit.
9) Once saved, the rule is automatically active.
Once the journaling rule is active, the outgoing and incoming emails of the configured Microsoft 365 tenant will be sent to the contentACCESS archive and will be archived.