Forum Discussion
How do I view the .modifiedproperties information for Exchange Online Admin Audit Logs?
I'm running the command search-adminauditlogs and I can see the audit log entry that I need. Based on this Microsoft KB article: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exch...
In Exchange On-Prem it is shown in the array, Name/NewValue/OldValue are there. But in Exchange Online it's empty.. This was the closest I could find which gives you a good idea what the cmdlet was that was started and what the full command was https://github.com/mikiorla/Exchange/blob/master/Get-SimpleAuditLogReport.ps1