Forum Discussion
Help with parameter for Search-UnifiedAuditLog
NarasimaPerumal Chandramohan thanks for pointing me in the right direction. I managed to solve it by using SessionID and SessionCommand. All I needed was a while loop that kept running until the variable taking the audit data returned null, and keep appending the export file in every loop run.
Rajiv ChokshiThanks Rajiv, that script functions much as the one in this post functions, however it has some more functionality with the logging that I like. However, there is still an issue with duplicate records and I see that the append function still seems to write the data out of order. When I look at creation times they are broken up; the numbers below show how the appending is broken. The creation times should all be written sequentially. Any idea why this is not happening? does it need a separate flag or pipe to fix this?
10
9
8
7
6
5
4
3
2
1
18
17
16
15
14
13
12
11
25
24
23
22
21
20
19