How to send Audit log search report in email periodically?

%3CLINGO-SUB%20id%3D%22lingo-sub-1526078%22%20slang%3D%22en-US%22%3EHow%20to%20send%20Audit%20log%20search%20report%20in%20email%20periodically%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1526078%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20a%20global%20administrator%20and%20I%20need%20to%20send%20%22Audit%20Log%20Search%22%20report%20%3CSPAN%3Evia%20Email%3C%2FSPAN%3E%20to%20users%20who%20have%20%22Audit%20Log%20Search%20Role%22%20assigned%20in%20Exchange%20Admins.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20I%20send%20A%3CFONT%3Eudit%20log%20search%20report%20in%20email%20periodically%3F%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1526078%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20App%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20center%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20Center%20App%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Administration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EReporting%20Portal%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1526941%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20send%20Audit%20log%20search%20report%20in%20email%20periodically%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1526941%22%20slang%3D%22en-US%22%3E%3CP%3EPowerShell%3F%20You%20can%20get%20the%20events%20via%20Search-UnifiedAuditLog%20and%20email%20them%20as%20necessary.%20Create%20this%20as%20a%20scheduled%20task%20or%20use%20some%20other%20automation%20tool.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hello,

 

I am a global administrator and I need to send "Audit Log Search" report via Email to users who have "Audit Log Search Role" assigned in Exchange Admins.

 

How can I send Audit log search report in email periodically? 

1 Reply
Highlighted

PowerShell? You can get the events via Search-UnifiedAuditLog and email them as necessary. Create this as a scheduled task or use some other automation tool.