Reference

Journal Rule

Exchange journal rules that capture copies of messages to a journal recipient (compliance / legal hold).

Part of the Exchange inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Weekly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Property	Type	Description	Automation placeholder
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{JournalRule.CreatedTime}}`
Rule Name	String		`{{JournalRule.DisplayName}}`
Enabled	Boolean	Whether the journal rule is enabled.	`{{JournalRule.Enabled}}`
Is External Recipient	Boolean	True when the journal email address is in a domain outside the organization.	`{{JournalRule.IsExternalRecipient}}`
Journal Email Address	String	SMTP address that receives journaled message copies.	`{{JournalRule.JournalEmailAddress}}`
Rule Id	String		`{{JournalRule.JournalRuleId}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{JournalRule.LastModifiedTime}}`
Recipient	String	The recipient whose messages are journaled. Empty/null means all recipients.	`{{JournalRule.Recipient}}`
Risk Score	Int32	Stores risk score	`{{JournalRule.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{JournalRule.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{JournalRule.RiskScoreValue}}`
Scope	String	Which messages the rule applies to: External, Internal, or Global. Allowed values: External, Global, Internal.	`{{JournalRule.Scope}}`

This object does currently not have any relations.

Segment	Description
Journal rules to external	Journal rules sending copies to external recipients.

This object does currently not have any actions.

Policy	Severity	Description
Journal rule sends to external recipient	High	Detects Exchange journal rules whose journal mailbox is in an external domain.

Last updated: 7/19/2026