Auditing Mailbox Restore

Question

Hello Experts,&nbsp;Kindly let me know how do i export audit logs for admin who has been recovering/restoring deleted mailbox in exchange online?&nbsp;Thanks&nbsp;

santhoshb1 · Answer

You can able to get auditlog using Search-UnifiedAuditLog. To export the logs use Export-CSV PowerShell query.

deleted · Answer

SantoshUnifiedauditlog will export audit logs for restored mailbiox.l Are you sure?

santhoshb1 · Answer

Using UnifiedAudit Log you can able to get logs for restored mailbox. You need to use Export-CSV PowerShell query to export that to CSV.

deleted · Answer

I exported the audit log but i am unable to find restored mailbox audit

santhoshb1 · Answer

Can you let me know how restoration was done? This will help me to spot out what was the cause.

Forum Discussion

Auditing Mailbox Restore

Share

Resources