Sending sources
list_sending_sourcesList sending sources by IP, ASN, or From domain to see message volume and SPF/DKIM pass counts, sorted by volume for DMARC traffic analysis.
Instructions
One row per sending IP (default), autonomous system, or From domain. Counts are message-weighted, including spf_passed and dkim_passed. Identity strings are the greatest value seen in the window and are length-capped. Sorted by volume descending. At most 50 rows; truncated is true when more existed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | Domain id. Omit to include every domain on the token. | |
| group_by | No | Bucket key. Default source_ip. | |
| day_after | No | Inclusive lower bound, YYYY-MM-DD. Default is 30 days ago. | |
| day_before | No | Inclusive upper bound, YYYY-MM-DD. Default is today. |