Searching the administrator audit logs

You can use the Exchange Management Shell to search the administrator audit logs and generate reports based on the cmdlets and parameters used to modify objects within your Exchange environment. Like mailbox audit log reports, we have two ways in which we can view the audit logs from the Exchange Management Shell, and in this recipe we'll take a look at both the methods.

How to do it...

  1. To perform a synchronous administrator audit log search in the shell, we can use the Search-AdminAuditLog cmdlet. For example, after executing the following command, the results will be displayed in the shell:
    Search-AdminAuditLog -Cmdlets Set-Mailbox `
    -StartDate 1/1/2013 `
    -EndDate 1/31/2013 `
    -IsSuccess $true

    This command ...

Get Microsoft Exchange Server 2013 PowerShell Cookbook - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.