question

Jack-7960 avatar image
0 Votes"
Jack-7960 asked

Compliance Admin Centre filter MailFlow Rule administration Event

Hi, I am looking for audit logs on administration changes to: Exchange Admin Center > Mail Flow > Rules.

I am currently looking under Compliance Admin Center > Audit > Search but am unsure which activities would highlight the aforementioned event. Any advise appreciated!

office-exchange-server-administrationoffice-exchange-server-mailflow
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
1 Vote"
michev answered Jack-7960 commented

You can search for the corresponding cmdlets, New-/Set-TransportRule. The UI is kinda limited in this regard, so best use PowerShell:

 Search-UnifiedAuditLog  -EndDate (Get-Date) -StartDate (Get-Date).AddDays(-90) -Operation "Set-TransportRule"

or use the Exchange Online admin audit log search:

 Search-AdminAuditLog -EndDate (Get-Date) -StartDate (Get-Date).AddDays(-90) -Cmdlets Set-TransportRule


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Much thanks! This is exactly what I was looking for!

Looks like I will have to get myself familiarized with the list of operation parameters/command-lets.. Wouldn't have figured out Set-TransportRule relates to Mail Flow Rules otherwise..

0 Votes 0 ·