question

PerhapsCloud-3945 avatar image
0 Votes"
PerhapsCloud-3945 asked ·

Search a event in Exchange online or Office 365

A distribution group in Exchange online was deleted. All we know is just the name of the group. Been trying to use the search-unifiedauditlog with the name in the -Freetext parameter to find the event/log but with no result. Anyone has had the same type of search before to kiindly advice the correct parameters to use? Thanks.

azure-active-directoryazure-information-protection
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

michev avatar image
0 Votes"
michev answered ·

Best use the Exchange audit log directly, via the EAC or the Search-AdminAuditLog cmdlet.

·
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PerhapsCloud-3945 avatar image
0 Votes"
PerhapsCloud-3945 answered ·

Thank you. Search-AdminAuditLog did the trick.

·
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.