Email Log Search can help administrators investigate messages handled by Google Workspace.
Search with the narrowest useful identifiers: sender, recipient, date/time and message ID where available.
Review the delivery status and event details, then correlate with external gateways or application logs if the message passed through systems outside Google.
A Workspace event only proves what Workspace observed; it does not replace telemetry from a third-party gateway before or after it.