Skip to Content

MC278675 Updates to Spam Confidence Level within EmailEvents table in Advanced Hunting

We will be changing the named values under Spam confidence levels from the existing set (Not Spam, Moderate, Skipped, High) to Normal and High. This change is applicable to the field ConfidenceLevel within Email Events. There will be no change made to the Column Name or how data is represented. The only change is around the named values, that will align to the new values Normal and High, whenever a Spam ThreatType is detected.

Updated September 21, 2021: We have updated the rollout timeline below. Thank you for your patience.

Product: Exchange, Microsoft 365 suite
Platform: Online, World tenant
Change type: Admin impact, Feature update, Updated message

Key points

  • Timing: begin at the end of September (previously mid-September) and complete by end of October (previously mid-October)
  • Roll-out: tenant level
  • Control type: admin control
  • Action: review, assess and update all saved queries
  • Task Type: Plan For Change
  • Docu to Check: Working instructions for IT Support
  • MS Urgency: normal
  • MS workload name: Exchange Online, Microsoft 365 suite

How this will affect your organization

Note: Once this change is enabled, you will start seeing the named values Normal and High within Spam Confidence level.

  • If you have any queries and or custom detections that are relying on the old values, they will not work after this update.
  • You will need to update your saved queries and custom detections to align with the new values, Normal and High

What you need to do to prepare

You might want to update your training and documentation as appropriate.