Message Audit Logs for a message, that is still present in Quarantine, incorrectly shows "Message deleted by admin on <date and time>".
If the message audit logs are queried for a time frame that contains a "quarantine_delete_all" event i.e. an administrator has deleted all messages from the spam quarantine from the control center GUI, messages which appear in the query and were delivered to the quarantine following the delete will be displayed as having been deleted.
This is a display issue related to how the Control Center presents information on quarantined events in version 9.5.4 and earlier. Messages delivered to the spam quarantine following the "Delete All" event are stored as expected but their status is displayed incorrectly in some MAL queries.
This issue has been addressed in SMG 10.0.0 and later.
Imported Document ID: TECH152740
Subscribing will provide email updates when this Article is updated. Login is required.