Compliance Admin Centre filter MailFlow Rule administration Event

Jack 41 Reputation points
2021-11-01T04:54:48.523+00:00

Hi, I am looking for audit logs on administration changes to: Exchange Admin Center > Mail Flow > Rules.

I am currently looking under Compliance Admin Center > Audit > Search but am unsure which activities would highlight the aforementioned event. Any advise appreciated!

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,345 questions
0 comments
Accepted answer
  1. Vasil Michev 95,096 Reputation points MVP
    2021-11-01T05:59:15.42+00:00

    You can search for the corresponding cmdlets, New-/Set-TransportRule. The UI is kinda limited in this regard, so best use PowerShell: 

    Search-UnifiedAuditLog  -EndDate (Get-Date) -StartDate (Get-Date).AddDays(-90) -Operation "Set-TransportRule"

    or use the Exchange Online admin audit log search: 

    Search-AdminAuditLog -EndDate (Get-Date) -StartDate (Get-Date).AddDays(-90) -Cmdlets Set-TransportRule
    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest