With the new release of Office 365 you can now pull mailflow data down to Excel for analysis. It does require Excel 2013 to function.
This reporting workbook provides you with a detailed view into the email protection data that is available in the Office 365 Reporting dashboard. This workbook is available to all Exchange Online and Exchange Online Protection customers. The workbook provides summary graphs for a number of different types of email message filtering. This includes messages identified as spam, malware, or good mail (mail that cleanly passed all filtering). It also shows graphs for messages that were identified by either a transport rule or DLP policy (Exchange Online customers only). The data for the summary graphs is pulled locally via a web service call. After loading the summary data into the workbook, you can perform deeper analysis through the use of data slicers. These allow you to change the view of the data in order to identify trends or unusual activity. When such a condition is found, you can click through from the summary to the detail data. Another web service call will be made to pull the detail data that you can use to identify the actual messages that caused the condition seen in the summary graph.