> For the complete documentation index, see [llms.txt](https://docs.emaillabs.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emaillabs.io/en/email/sender-security/dmarc/report.md).

# Report

The **Report** tab is the second part of the DMARC module, built for a closer look at the logs you've collected. It's where you can dig into network traffic in detail and check authentication accuracy source by source.

### Search and filtering

At the top of the screen is a search panel covering the overall domain view. Alongside the usual date range and domain selection, you'll also find a "**DMARC compliance**" filter, which lets you narrow the view down to one traffic category - compliant, non-compliant, forwarded, or a potential threat. Expanding the filters further reveals a "**Source**" field for limiting results to a single infrastructure provider.

<figure><img src="/files/FuEy66ucWcKSPK50FwSr" alt=""><figcaption></figcaption></figure>

### Key performance indicators

Below the filters, four tiles summarize the most important metrics for the selected range:

* **TOTAL MESSAGES:** Overall volume of messages analyzed within the selected domains.
* **DMARC COMPLIANCE RATE:** Share of messages that fully passed DMARC authentication.
* **SPF ALIGNED RATE:** Share of emails showing SPF domain alignment with the sender address.
* **DKIM ALIGNED RATE:** Share of emails where the DKIM signature is fully aligned with the domain shown in the "From" address.

<figure><img src="/files/XH4l41hQ3h08c8QHRnyI" alt=""><figcaption></figcaption></figure>

### Main table: Source summary

The main part of the view is a table with aggregated data for each sending source (for example EmailLabs, Google, or external CRM systems): the total number of emails it generated, the sending domains it used, and its compliance metrics (DMARC compliance rate, SPF alignment rate, DKIM alignment rate).

Click the "**-> More**" button at the end of a row to dig deeper into a given sender and spot any configuration gaps.

<figure><img src="/files/isLmTamcgVhDDJ7KBH4j" alt=""><figcaption></figcaption></figure>

### Source report (Detailed view)

Opening the details of a chosen source (for example emaillabs.pl) gives you access to much more precise diagnostic data, along with a fresh, more advanced filter panel.

From here, you can isolate logs based on technical sending parameters:

* **SPF alignment (SPF DMARC) and DKIM alignment (DKIM DMARC):** Domain alignment checks, with a Fail or Aligned option.
* **SPF Result and DKIM Result:** Technical validation status for each protocol (for example Pass, Softfail, Neutral, Permerror, Fail).
* **Applied policy:** Filtering by the receiving server's final decision (None, Reject, Quarantine).
* I**nfrastructure:** Narrowing results by server name, the sending machine's IP location, or its assigned SPF or DKIM domain.

<figure><img src="/files/FuEy66ucWcKSPK50FwSr" alt=""><figcaption></figcaption></figure>

The report itself is split into two tabs:

* **All messages:** Full record of traffic logged for a given sending source.
* **Threatened messages**: Automatically filtered view showing only messages that failed DMARC's security checks. It keeps the same data structure as the main view (from aggregated server data down to granular IP details) but shows exclusively the logs with authentication errors. Red error icons next to the protocol indicators make it easy to spot at a glance whether the issue lies with SPF authorization, an invalid DKIM signature, or missing domain alignment.

<figure><img src="/files/rcGgwu0nMCFpqXmLaOmP" alt=""><figcaption></figcaption></figure>

#### Granular analysis and IP data

The main table in the detailed view supports a two-level check of your logs. Collapsed, it shows aggregated data about your sending infrastructure, with these columns:

* **Sender domain**: Primary domain used for sending.
* **Server**: Hostname of the server relaying the messages.
* **IP count: N**umber of unique IP addresses tied to that server.
* **Verified emails**: Total number of messages processed by a given node.
* **DMARC rejections**: Number of messages that failed authentication requirements.
* **SPF and DKIM**: Overall pass rate for each protocol.

Expanding a row opens a per-IP breakdown with more precise technical detail:

* **IP and IP location:** Specific sending IP address and its physical location.
* **Disposition:** How the receiving server handled the message under the published DMARC policy: accepted (none), quarantined (quarantine), or rejected (reject).
* **SPF Result:** Whether the sending IP was authorized to send on behalf of the sender domain (pass or fail).
* **SPF DMARC:** Whether the message passed the SPF check and whether the sender domain is fully aligned with the From address the recipient sees.
* **SPF Domain:** Domain the receiving server uses to check the sending server's permissions.
* **DKIM Result:** Whether the DKIM signature attached to the message is valid and wasn't altered in transit (pass or fail).
* **DKIM DMARC:** Whether the message was correctly signed and whether that signature comes from the same domain shown in the sender address.
* **DKIM Domain:** Domain used to cryptographically sign the message, confirming sender permissions and message integrity.
* **Reporters:** Organization or mailbox provider that sent the DMARC report for messages received from your domain.

<figure><img src="/files/hQN8RoyhrZKCN2bMKziU" alt=""><figcaption></figcaption></figure>

#### Data export

You can download detailed reports directly from the last column, labeled **Reporters**. Clicking the icon showing the number of reporters (for example "+1") opens a list of the reports available for that IP address.

<figure><img src="/files/2NmM5Kr2CzJWhcrBmM5e" alt="" width="375"><figcaption></figcaption></figure>

Select the entries you need and confirm with the **Export** button.

<figure><img src="/files/bklFWe1LMnH0uJoXQwJ4" alt=""><figcaption></figcaption></figure>

Generated spreadsheets become available for download under the Operations list tab of your account. If you select several reports at once, each one is generated as a separate file - this keeps the data easy to analyze and avoids cluttered, mixed spreadsheets.&#x20;