Search a event in Exchange online or Office 365

asked 2019-12-04T17:48:46.08+00:00
PerhapsCloud 21 Reputation points

A distribution group in Exchange online was deleted. All we know is just the name of the group. Been trying to use the search-unifiedauditlog with the name in the -Freetext parameter to find the event/log but with no result. Anyone has had the same type of search before to kiindly advice the correct parameters to use? Thanks.

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
390 questions
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,572 questions
No comments
{count} votes

Accepted answer
  1. answered 2019-12-04T18:00:07.2+00:00
    Vasil Michev 61,451 Reputation points Microsoft MVP

    Best use the Exchange audit log directly, via the EAC or the Search-AdminAuditLog cmdlet.

    No comments

1 additional answer

Sort by: Most helpful
  1. answered 2019-12-05T00:48:52.113+00:00
    PerhapsCloud 21 Reputation points

    Thank you. Search-AdminAuditLog did the trick.

    No comments