Audit for Message Trace and Exchange managment shell commands



Is there a way to run audits on which admin users ran message trace and Exchange online power shell commands (and what commands those are)?


Thank you.

1 Reply
best response confirmed by Emy Loanzon (Contributor)

Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: