How to check all emails sent, recieved or created in the past

Question

In my office we`re currently using "Microsoft 365 apps for business(version 2306)".

As I wrote in the title, we are looking for a way to look through emails sent, received or created in the past.

If possible we want to check the deleted emails too.

I`m asking this question using my account, but I also own an admin account for my company.

So if we need to do something using admin center, I will.

If you need more information to help me, please ask.

Answer 1

Hi @ AyumuTakano-7687，

You can view historical actions in a specified mailbox by searching the mailbox audit log.

By default, for Exchange online mailboxes with E5/A5/G5 licenses, mailbox audit log events can be returned in audit log searches in the Microsoft Purview compliance portal.

To search for mailbox audit log entries for users who don't have E5/A5/G5 licenses, you can use either of the following workarounds:

1. Manually turn on mailbox auditing for individual mailboxes: Set-Mailbox -Identity <MailboxIdentity> -AuditEnabled $true
2. Use the New- MailboxAuditLogSearch/ Search-MailboxAuditLog command in Exchange Online PowerShell to search.
3. Use the Exchange admin center (EAC) in Exchange Online to do the following actions:

• Export mailbox audit logs
• Run a non-owner mailbox access report  

You can refer to this table to view the actions recorded in the mailbox audit log：Manage mailbox auditing - Microsoft Purview (compliance) | Microsoft Learn

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.