Forum Discussion

Copper Contributor

Aug 31, 2018

Incomplete data from Search-UnifiedAuditLog cmdlet for AzureAD record type

Hi, From the below cmdlet I got AuditData parameter as an incomplete JSON string. Search-UnifiedAuditLog -Operations 'Update User.' -RecordType azureactivedirectory -StartDate (Get-Date).AddDays...

Copper Contributor

Sep 21, 2018

I'm curious, what character length is it truncating at? I believe I am seeing something similar for which I posted a question for on github. To me it looked like it the JSON string was getting truncated at 3062 characters. If I get an answer there I will try and reply here as well! Link to the issue I created on github: https://github.com/MicrosoftDocs/office-docs-powershell/issues/1733

Mozzz
Copper Contributor
Feb 21, 2019
Hi Ryan

I am executing the Search-UnifiedAuditLog power shell command and getting error below.

Which module i need to install in Power Shell for ‘Search-UnifiedAuditLog ‘ command ?

Search-UnifiedAuditLog : The term ‘Search-UnifiedAuditLog’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of
the name, or if a path was included, verify that the path is correct and try again.
At line:11 char:1
+ Search-UnifiedAuditLog -StartDate 19/02/2019 -EndDate 20/02/2019 -Rec …
+ ~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (Search-UnifiedAuditLog:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

Thanks
Moz
VasilMichev
MVP
Sep 21, 2018
TonyRedmond was chasing this up with some MS folks, perhaps he can share some info.
- TonyRedmond
  MVP
  Sep 21, 2018
  I'm still discussing the issue. Microsoft has accepted that a problem exists and they need to fix it. Stay tuned.

Resources