Home

Search-AdminAuditLog The attempt to search the administrator audit log failed. Please try again late

%3CLINGO-SUB%20id%3D%22lingo-sub-180713%22%20slang%3D%22en-US%22%3ESearch-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%20late%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180713%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGetting%20below%20error%20while%20running%20command%20on%20our%20Exchange%202016%20server.%20We%20have%202%20servers%20and%20same%20error%20on%20both%20servers.%20Its%20hybrid%20environment%20with%20O365%20but%20no%20any%20mailboxes%20on-premise.%20All%20mailboxes%20are%20in%20cloud.%20However%2C%20not%20able%20to%20run%20command%20to%20check%20audit%20logs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPS%5D%20C%3A%5CWindows%5Csystem32%26gt%3BSearch-AdminAuditLog%3C%2FP%3E%3CP%3Ehe%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%20later.%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%20%2B%20CategoryInfo%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3A%20NotSpecified%3A%20(%3A)%20%5BSearch-AdminAuditLog%5D%2C%20AdminAuditLogSearchException%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlready%20check%26nbsp%3B%3C%2FP%3E%3CP%3EMicrosoft%20Exchange%20Search%20and%20the%20Microsoft%20Exchange%20Search%20Host%20Controller%20service%20and%20they%20are%20running%20fine.%3C%2FP%3E%3CP%3EThen%2C%20run%20the%20get-mailbox%20-arbitration%20cmdlet%20to%20check%20if%20the%20DiscoverSearchMailbox%20is%20existed%20But%20output%20showing%20nothing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheck%20permissions%20but%20all%20roles%20are%20fine%20and%20admin%20member%20of%20that%20group.%20Still%20getting%20error.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-180713%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-297223%22%20slang%3D%22en-US%22%3ERe%3A%20Search-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-297223%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20guys%20any%20help%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-189308%22%20slang%3D%22en-US%22%3ERe%3A%20Search-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-189308%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%26nbsp%3Bit%20is%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-188911%22%20slang%3D%22en-US%22%3ERe%3A%20Search-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-188911%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20you%20in%20the%26nbsp%3B%3CSPAN%3ERecords%20Management%20role%20group%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187794%22%20slang%3D%22en-US%22%3ERe%3A%20Search-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187794%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Mitch%20for%20responding.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebut%20when%20we%20check%20more%20on%20that%20we%20found%20discovery%20mailboxes.%20It%20was%20because%20of%26nbsp%3B%20ViewEntireForest%20false%20we%20were%20not%20able%20see%20it.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20you%20have%20any%20other%20suggestion%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187732%22%20slang%3D%22en-US%22%3ERe%3A%20Search-AdminAuditLog%20The%20attempt%20to%20search%20the%20administrator%20audit%20log%20failed.%20Please%20try%20again%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187732%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20the%20arbitration%20mailboxes%20are%20missing%20you%20need%20to%20reun%20setup%20%2FPrepareAD%20to%20recreate%20them%3C%2FP%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3C%2FLINGO-BODY%3E
Jitendra Bhosale
New Contributor

Hi All,

 

Getting below error while running command on our Exchange 2016 server. We have 2 servers and same error on both servers. Its hybrid environment with O365 but no any mailboxes on-premise. All mailboxes are in cloud. However, not able to run command to check audit logs.

 

PS] C:\Windows\system32>Search-AdminAuditLog

he attempt to search the administrator audit log failed. Please try again later.

   + CategoryInfo          : NotSpecified: (:) [Search-AdminAuditLog], AdminAuditLogSearchException

 

Already check 

Microsoft Exchange Search and the Microsoft Exchange Search Host Controller service and they are running fine.

Then, run the get-mailbox -arbitration cmdlet to check if the DiscoverSearchMailbox is existed But output showing nothing.

 

Check permissions but all roles are fine and admin member of that group. Still getting error.

 

Please help.

5 Replies

If the arbitration mailboxes are missing you need to reun setup /PrepareAD to recreate them


Thanks Mitch for responding.

 

but when we check more on that we found discovery mailboxes. It was because of  ViewEntireForest false we were not able see it. 

 

Do you have any other suggestion

Are you in the Records Management role group?

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Dev channel update to 80.0.355.1 is live
josh_bodner in Discussions on
67 Replies