question

MichaelVavilov-6400 avatar image
0 Votes"
MichaelVavilov-6400 asked MichaelVavilov-6400 answered

Where I can find Exchange Online admin logs

Where I can find Exchange Online admin logs, in particular I need to find out who and when deleted / created Exchange Online Connectors

Thanks
Michael

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

michev avatar image
0 Votes"
michev answered

Use the Search-AdminAuditLog cmdlet, or the corresponding UI: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-administrator-audit-log
For example:

 Search-AdminAuditLog -StartDate (Get-Date).AddDays(-10) -EndDate (Get-Date).AddDays(1) -Cmdlets New-OutboundConnector,Remove-OutboundConnector

Alternatively, you can use the Unified audit log experience: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MichaelVavilov-6400 avatar image
0 Votes"
MichaelVavilov-6400 answered

Thanks Michev.

It worked at PowerShell v5 just needed to add "New-InboundConnector, Remove-InboundConnector" to get what I was looking for

It didn't worked at my PowerShell v7though: it didn't get the date via (Get-Date).AddDays(xx), see the attached screenshot


[1]: /answers/storage/attachments/200751-ps7.png


ps7.png (11.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleXu-MSFT avatar image
0 Votes"
KyleXu-MSFT answered

@MichaelVavilov-6400

Glad to see it works for you. If the above suggestion helps, please feel free to accept it as an answer to close this thread. It also could be beneficial to other community members reading this thread.

Here are tests in my lab (Get-Date could work in PS V7.2.3):
200793-qa-kyle-13-40-00.png


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MichaelVavilov-6400 avatar image
0 Votes"
MichaelVavilov-6400 answered

thanks all

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.