question

Tankwell-6822 avatar image
0 Votes"
Tankwell-6822 asked EricYin-MSFT commented

failed to create Admin audit log search in exhange 2013

Hey,


We have an odd issue with Exchange audit logs
We tried to search these audit logs with the following commands (in the ems shell):

  1. search-AdminAuditlog with and without filters

  2. New-adminauditlogsearch with and without filters

It looks like the cmdlets failed to create the search object itself (I think this is not issue with the results or something like that)
I have verified that the adminauditlog is enabled

Have you encountered something like that?

p.s
The stderr also contain that code 87E543A6. I did not find information about this, and I'm not sure if this is an error code (this ID is just dumped out as part of the stderr)






Technical details


I have on-premise Exchange 2013 servers, The command is running successfully only in one site


Thanks
AutoTeam







office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

EricYin-MSFT avatar image
0 Votes"
EricYin-MSFT answered EricYin-MSFT commented

Hi,
So what does it say when you run those commands? Can you post the error message and the result of "Get-AdminAuditLogConfig" with personal information covered?
Also, please check if the Microsoft Exchange Search Host service is running fine.
Make sure the account you are using has enough permissions:94118-3.png
From some similar threads, some users met same issue after they enabled TLS 1.1 and disabled 1.0, test if it work for you:

 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
 Enabled = 1



If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



3.png (8.0 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I am writing here to confirm with you how the thing going now?
If you need further help, please provide more detailed information, so that we can give more appropriate suggestions.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 Votes 0 ·