Hi Exchange experts

I have an issue with searching the audit logs with the mailboxes on Exchange Online.

I have a mailbox on Exchange Online. The properties of that mailbox are as follows

AuditEnabled: TrueAuditLogAgeLimit : 90.00:00:00AuditAdmin : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}AuditDelegate : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}AuditOwner : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}DefaultAuditSet : {Admin, Delegate, Owner}

I have conduted the changes on this maibox such as: changed the Send as permission, changed the Send on behafl, delegated another user on this mailbox.  

A few days later I used the Audit feature from security.microsoft.com portal to search the log for above activities with this maibox but I could not find any entries log that I did a few days ago.

The options that I made when searching for mailbox logs

Date time range: selected the time period in which I made the changeActivities – friendly names: selected all activities on Exchange maibox activities Activities – operation name: blankRecord types: blankSearch name: blankUser: Selected user that has a mailbox I have changed.

Also, when I executed the syntax with Exchange PowerShell it doesn’t show the change history that I want to see.

Search-MailboxAuditLog -Identity po.panda@mydomain -LogonTypes Admin, Delegate -StartDate 7/15/24 -EndDate 7/19/24 -ResultSize 5000

​Hi Exchange expertsI have an issue with searching the audit logs with the mailboxes on Exchange Online.I have a mailbox on Exchange Online. The properties of that mailbox are as followsAuditEnabled: TrueAuditLogAgeLimit : 90.00:00:00AuditAdmin : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}AuditDelegate : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}AuditOwner : {Update, MoveToDeletedItems, SoftDelete, HardDelete…}DefaultAuditSet : {Admin, Delegate, Owner}I have conduted the changes on this maibox such as: changed the Send as permission, changed the Send on behafl, delegated another user on this mailbox.  A few days later I used the Audit feature from security.microsoft.com portal to search the log for above activities with this maibox but I could not find any entries log that I did a few days ago.The options that I made when searching for mailbox logsDate time range: selected the time period in which I made the changeActivities – friendly names: selected all activities on Exchange maibox activities Activities – operation name: blankRecord types: blankSearch name: blankUser: Selected user that has a mailbox I have changed.Also, when I executed the syntax with Exchange PowerShell it doesn’t show the change history that I want to see.Search-MailboxAuditLog -Identity po.panda@mydomain -LogonTypes Admin, Delegate -StartDate 7/15/24 -EndDate 7/19/24 -ResultSize 5000    Read More

​