locked
Mailbox Audit Log RRS feed

  • Question

  • Can we backup mailbox audit log? These logs are stored in the recovery folder in each mailbox. Normally it should be backup with mailbox. How can restore and query these logs from after their audit age limit has expired?

    Thanks.

    Irfan


    Irfan Goolab SALES ENGINEER (Microsoft UC) MCP, MCSA, MCTS, MCITP, MCT

    Wednesday, April 1, 2015 7:36 PM

Answers

  • Hi Irfan,

    Base on my knowledge, you can refer to the following methods to backup audit log:

    1. Export mailbox audit logs:

    https://technet.microsoft.com/en-us/library/jj150552(v=exchg.150).aspx

    2.  Audit logs can be found in the eventviewer under MSExchangeManagement, you can save it, as below:

    Best regards,


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Niko Cheng
    TechNet Community Support

    • Proposed as answer by Niko.Cheng Tuesday, April 21, 2015 9:19 AM
    • Marked as answer by Niko.Cheng Tuesday, April 21, 2015 9:19 AM
    Thursday, April 2, 2015 9:28 AM