Logs
Logs lists everything the platform did, newest first: arrivals, conversions, routing, delivery attempts, retries, security events and configuration changes. Use it to answer "what happened, and when?" without opening any clinical content.
Open Monitor › Logs in the left sidebar.
The Log Viewer
Log events never contain message content. Payload fields are removed when the event is recorded, so anyone in the workspace can read this page. To see the message itself, open it in Messages.
Find events
- Search by correlation ID, event name or endpoint.
- Filter by category: Ingestion, Validation, Transformation, Routing, Delivery, Retry, Security, Configuration, Summary or Alerting.
- Filter by severity, from Debug to Critical.
- Under More filters, narrow by time or endpoint.
Each row shows when it happened, the event (for example Destination accepted the message), its category and severity, the key details, and the message's correlation ID.
Follow one message
Select any event that belongs to a message. The Message timeline opens on the right with the message's summary and every event recorded for it, in order.
Every event for one message, in order
Select Open message to go to the message in Messages.
Security events worth knowing
| Event | Recorded when |
|---|---|
| Raw message opened | Someone opened the original or outgoing content of a message. Shows the message ID and the person's role. |
| Raw message access refused | Someone without access tried to open a message's content. |
| MLLP connection refused — sender not allowed | A connection to an MLLP listener came from an address that is not an allowed sender. Shows the address. |
| Webhook sign-in refused | A post to a webhook had the wrong key or password. |
| Messages exported | An admin exported the message list. |