Searching the administrator audit logs

You can use the Exchange Management Shell to search the administrator audit logs and generate reports based on the cmdlets and parameters used to modify objects within your Exchange environment. There are two ways in which we can view the audit logs from the Exchange Management Shell, and in this recipe, we'll take a look at both methods.

How to do it...

Let's see how to perform an administrator audit log search by performing the following steps:

1. To perform a synchronous administrator audit log search in the Shell, we can use the Search-AdminAuditLog cmdlet:

    Search-AdminAuditLog -Cmdlets Set-Mailbox '
    -StartDate 6/1/2017 '
    -EndDate 6/30/2017 '
 ...