Forum Discussion
Search-UnifiedAuditlog cmdlet returns partial audit results.
Hi, My tenant have around more than 20000 audit log for user sign-in but when I run the Search-UnifiedAuditLog cmdlet with resultSize 5000 only 630 results were returned. We have been facing this b...
To start, when using SessionCommand, use SessionId with a unique label for your query.
Examples at https://learn.microsoft.com/office/office-365-management-api/aip-unified-audit-logs-best-practices