Description: This cmdlet searches the mailbox audit logs for one or more mailboxes and displays search results in the Exchange Management Shell window.
To search mailbox audit logs for multiple mailboxes and have the results sent by email to specified recipients, use the New-MailboxAuditLogSearch cmdlet instead.
1 Search-MailboxAuditLog -Identity Jdoe -LogonTypes Admin,Delegate -StartDate 1/1/2020 -EndDate 12/31/2020 -ResultSize 2000
This script retrieves the mailbox audit log entries for actions performed by Admin and Delegate logon types on John Doe's mailbox between 1/1/2020 and 12/31/2020. A maximum of 2,000 log entries will be returned.
You need to be assigned permissions before you can run this cmdlet. Although this report lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you.
While using PowerShell scripts, based on the granularity and size of the data to be fetched, the complexity and the time take to return the results vary respectively. Try Exchange Reporter Plus to generate more than 200 predefined reports on Exchange Servers in a single click.
Some of the Exchange admin activities reports provided by Exchange Reporter Plus include,
Read more about the Exchange Reporter Plus, here.