Exchange database audit log locations

Susan Dodds 186 Reputation points
2021-02-18T06:39:36.807+00:00

Exchange 2016, server 2016

My backup software is on the fritz and I want to check if exchange detects it successfully ran.

Where are the audit logs stored that merge with the database when it detects the database has been backed up?

I am seeing a folder in c:\program files\install path\database with a folder with a mailbox database name I do not recognize. Inside it are recent txt documents since the last backup was attempted to run. I have renamed the original database and moved it to a new partition when the server was created but don't remember the original database name.

In the ECP, I have moved the 4 transport log files that it allowed me to move to another partition than the C: and database partitions under Server. I do not see the audit files I am looking for in those folders.

Thanks

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,369 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lucas Liu-MSFT 6,161 Reputation points
    2021-02-19T02:55:09.833+00:00

    Hi @Susan Dodds ,
    According to my research and check. I didn’t see any audit log in database files and transport log files.
    In order to better solve this issue, I want to confirm with you the following points:

    1. What do you mean by "Exchange database audit log?
    2. Is it generated by your backup tool?
    3. What is the backup tool you are using?

    About the original database name.
    1.According to my test. I changed the database name in EAC, but dataset name not be changed in C:\install path\database. Could you see it?
    69884-1.png
    2.How long have you changed? The admin audit log will retention 90 days by default. If you changed during this period, you could run the following command to see the changes made to the database name.

    Search-AdminAuditLog -StartDate <> -EndDate <> -Cmdlets Set-Mailboxdatabase -Parameters Name

    69911-2.png

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.