Dear users,
We at Microsoft are making changes to enhance our audit logging capabilities in Exchange Online. In order to streamline the process and improve efficiency, we will be decommissioning the Search-MailboxAuditLog and New-MailboxAuditLogSearch cmdlets in favor of the Search-UnifiedAuditLog cmdlet.
The Search-UnifiedAuditLog cmdlet offers several advantages such as support for a greater variety of record types, more filtering options, and a range of output formats. This change will take effect on March 1, 2025, after which existing data generated by mailbox audit logging will only be accessible as a historical record. We recommend using the Search-UnifiedAuditLog cmdlet for auditing purposes going forward.
To assist with the transition, we will provide a migration tool for moving legacy Exchange mailbox audit logs into the Unified Audit Log. This optional self-service tool can be run by tenant administrators and will help ensure a smooth and compliant migration process.
We advise users to review their current usage of the deprecated cmdlets, engage with legal and compliance teams to ensure regulatory requirements are met, and enable auditing for their tenant to maintain data integrity. By following these steps, users can successfully migrate to the Search-UnifiedAuditLog cmdlet while ensuring compliance
