Exchange 2013 – no admin and mailbox audit logs

auditexchangeexchange-2013logging

I recently installed on a new network Exchange 2013. I noticed that my admin audit logs and mailbox audit logs are empty. I did Search-AdminAuditLog and Search-MailboxAuditLog and it brought no results,even though it is enabled in each mailbox config, and in the AdminAuditLogConfig. I used the Get-MailboxFolderStatistics to see the size of the audit folder, but I found it does not exist – there is no audits subfolder in any mailbox.

What is the problem with my exchange? How can I fix it to write logs?

Thanks.

Best Answer

First I would check it is enabled. Get-AdminAuditLogConfig | FL AdminAuditLogEnabled

Are you using an account with the required permissions? If the permissions aren't correct then you cannot see anything.

Related Topic