Generating mailbox audit log reports

After you've enabled mailbox audit logging, there are two ways from within the Exchange Management shell that you can search the logs and generate reports. In this recipe, you'll learn how to use both synchronous and asynchronous mailbox audit log searches from the Exchange Management Shell.

How to do it...

  1. To perform a synchronous mailbox audit log search, use the Search-MailboxAuditLog cmdlet. After executing the following command, the results will be displayed in the shell:
    Search-MailboxAuditLog -Identity dsmith -ShowDetails
  2. To perform an asynchronous search, use the New-MailboxAuditLogSearch cmdlet:
    
New-MailboxAuditLogSearch -Name Search1 ` -Mailboxes dsmith,bjones ` -LogonTypes admin,delegate ` -StartDate ...

Get Microsoft Exchange 2010 PowerShell Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial