Forum Discussion
Incomplete data from Search-UnifiedAuditLog cmdlet for AzureAD record type
Hi, From the below cmdlet I got AuditData parameter as an incomplete JSON string. Search-UnifiedAuditLog -Operations 'Update User.' -RecordType azureactivedirectory -StartDate (Get-Date).AddDays...
TonyRedmond was chasing this up with some MS folks, perhaps he can share some info.
I'm still discussing the issue. Microsoft has accepted that a problem exists and they need to fix it. Stay tuned.