question

RogerRoger-2394 avatar image
0 Votes"
RogerRoger-2394 asked emilyhua-msft edited

unable to fetch Audit Logs

Hi All

I am using exchange 2016 hybrid environment. i am using latest Exchange 2016 CU update. i am unable to fetch any results using the Search-AdminAuditLog syntax in exchange onprem. Experts guide me to fix this.

office-exchange-server-administrationoffice-exchange-online-itprooffice-exchange-server-mailflowoffice-exchange-hybrid-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

KyleXu-MSFT avatar image
0 Votes"
KyleXu-MSFT answered

@RogerRoger-2394

Use the command below to check whether admin audit log enabled on your Exchange server.

 Get-AdminAuditLogConfig | fl AdminAuditLogEnabled,AdminAuditLogCmdlets,AdminAuditLogParameters,AdminAuditLogAgeLimit

If admin audit log is enabled on your Exchange server, try to follow this article to check configuration on your Exchange server.
193782-qa-kyle-10-48-40.png


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.