Forum Discussion

Copper Contributor

Feb 02, 2018

Auditing an O365 shared mailbox

I have turned on auditing on an Office 365 shared mailbox, but when I do a search at the audit logs I get zero results. I've expanded from the standard auditing and added the parameters "harddelete...

Copper Contributor

Jul 09, 2020

Jacob Airov

Hi Jacob,

Please try to run the below PS script , for me is working

Search-MailboxAuditLog -Identity "email address of mailbox/SM” -LogonTypes Admin,Delegate,Owner -StartDate 11/17/2019 -EndDate 11/28/2019 -ShowDetails | select-object Operation, OperationResult, LogonType, logonuserdisplayname, SourceItemSubjectsList, itemsubject, SourceItemFolderPathNamesList, LastAccessed, InternalLogonType, MailboxOwnerUPN, ClientIPAddress,ClientProcessName,ClientInfoString, ClientVersion | export-csv .\Desktop\Auditlog.csv -Encoding Unicode

Hope it helps.

Costin