Forum Discussion
Audit log search no longer works for shared mailboxes
It was working find then stopped last month some time - now gives no results. After backwards and forwards with support see the response we received from them below. "As earlier advised the chan...
I'm a bit unclear on that statement. Are they saying, that audit events generated for (unlicensed) shared mailboxes no longer flow to the Unified log, and you have to use the Exchange tools to work with them? Which I guess is also what you are complaining about in this thread? If so - I just run a test on my tenant, and I can see events for shared mailboxes just fine in the Unified log.
Or are they saying that in order to see Exchange mailbox audit events in the Unified log, you need to run the search with an licensed account?