IMAP activity logging tracks IMAP session activity, such as the user name, the server name, the IP address of the client, the number of bytes the client sent to and read from the server, and the duration of the session.

There are three types of activity logging records for IMAP sessions:

• Authorization records, which log when an authenticated IMAP session begins. Authorization is logged after any of the following occur: a successful Login command; a successful Auth command; a successful Greeting command, if the client is pre-authorized.
• Checkpoint records, which log activity that occurs when an IMAP session has been open for a specified length of time
• Close records, which consolidate IMAP information into a single record when an IMAP session ends

Related reference
The information in the log file
Example of creating activity logging records