Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Search-MailboxAuditLog -ShowDetails not showing all messages in Exchange Server 2016


View products that this article applies to.

Symptoms

In a Microsoft Exchange Server 2016 environment, consider the following scenario:

  • You have a mailbox that has mailbox audit logging enabled.
  • You do a grouped operation (for example, that you delete multiple messages at one time would be audited).
  • You run the Search-MailboxAuditLog –ShowDetails cmdlet on the mailbox.

In this situation, you may not see all the messages that are included within the grouped operation in mailbox audit logs.

↑ Back to the top


Cause

This issue occurs because the indexing of audit entry isn't correctly handled.

↑ Back to the top


Resolution

For Exchange Server 2016, install Cumulative Update 9 or a later cumulative update for Exchange Server 2016.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


References

Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top


Keywords: kbqfe, kbexpertiseadvanced, kbfix, kb, CI74031, Search-MailboxAuditLog -ShowDetails not showing all messages in mailbox audit logs, kbsurveynew, kbContentAuto, After doing a grouped operation

↑ Back to the top

Article Info
Article ID : 4073109
Revision : 7
Created on : 3/7/2018
Published on : 3/20/2018
Exists online : False
Views : 287