You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When audit logging is enabled, a log entry is created for each cmdlet that's run, excluding Get cmdlets.
29
+
To check the UnifiedAuditLogIngestionEnabled value in the output of this cmdlet, run the command in Exchange Online PowerShell. The value in Security & Compliance PowerShell is always False and the Set-AdminAuditLogConfig cmdlet (and the UnifiedAuditLogIngestionEnabled parameter) is not available to change it.
30
30
31
31
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://learn.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
This parameter is available only in on-premises Exchange.
141
141
142
-
The AdminAuditLogEnabled parameter specifies whether administrator audit logging is enabled. The default value is $true. The valid values are $true and $false. You must specify an administrator audit log mailbox before you enable logging.
142
+
The AdminAuditLogEnabled parameter specifies whether administrator audit logging is enabled. Valid values are:
143
+
144
+
- $true: Administrator audit logging is enabled. This is the default value.
145
+
- $false: Administrator audit logging is disabled.
146
+
147
+
You must specify an administrator audit log mailbox before you enable logging.
143
148
144
149
Changes to the administrator audit log configuration are always logged, regardless of whether audit logging is enabled or disabled.
This parameter is available only in on-premises Exchange.
254
259
255
-
The LogLevel parameter specifies whether additional properties should be included in the log entries. Valid values are None and Verbose.
260
+
The LogLevel parameter specifies whether additional properties should be included in the log entries. Valid values are:
256
261
257
-
By default, the CmdletName, ObjectName, Parameters (values), and the Caller, Succeeded and RunDate properties are included in log entries. When the Verbose value is used, the ModifiedProperties (old and new) and ModifiedObjectResolvedName properties are included in the log entries.
262
+
- None: The CmdletName, ObjectName, Parameters (values), and the Caller, Succeeded and RunDate properties are included in log entries. This is the default value.
263
+
- Verbose: The ModifiedProperties (old and new) and ModifiedObjectResolvedName properties are also included in log entries.
This parameter is available only in on-premises Exchange.
294
300
295
-
The TestCmdletLoggingEnabled parameter specifies whether the execution of test cmdlets should be logged. Test cmdlets begin with the verb Test. Valid values are $true and $false. The default value is $false.
301
+
The TestCmdletLoggingEnabled parameter specifies whether test cmdlets (cmdlet names that begin with the verb Test) results are included in admin audit logging. Valid values are:
302
+
303
+
- $true: Test cmdlets are included in admin audit logging.
304
+
- $false: Test cmdlets aren't included in admin audit logging. This is the default value.
296
305
297
306
Test cmdlets can produce a large amount of information. As such, you should only enable logging of test cmdlets for a short period of time.
298
307
@@ -314,8 +323,8 @@ This parameter is functional only in the cloud-based service.
314
323
315
324
The UnifiedAuditLogIngestionEnabled parameter specifies whether to enable or disable the recording of user and admin activities in the Microsoft 365 audit log. Valid values are:
316
325
317
-
- $true: User and admin activities are recorded in the Microsoft 365 audit log, and you can search the Microsoft 365 audit log.
318
-
- $false: User and admin activities aren't recorded in the Microsoft 365 audit log, and you can't search the Microsoft 365 audit log. This is the default value.
326
+
- $true: User and admin activities are recorded in the Microsoft 365 audit log, and admins can search the Microsoft 365 audit log. This is the default value.
327
+
- $false: User and admin activities aren't recorded in the Microsoft 365 audit log, and admins can't search the Microsoft 365 audit log.
0 commit comments