Generating mailbox audit log reports
After you've enabled mailbox audit logging, there are two ways from within the Exchange Management Shell that you can search for the logs and generate reports. In this recipe, you'll learn how to use both synchronous and asynchronous mailbox audit log searches from the Exchange Management Shell.
How to do it...
- To perform a synchronous mailbox audit log search, use the
Search-MailboxAuditLogcmdlet. After executing the following command, the results will be displayed in the shell:
Search-MailboxAuditLog -Identity dsmith -ShowDetails
- To perform an asynchronous search, use the
New-MailboxAuditLogSearch -Name Search1 ` -Mailboxes dsmith,bjones ` -LogonTypes admin,delegate ` -StartDate ...