JAEN

Microsoft 365

Search-UnifiedAuditLog

SafeAudit log search

Search-UnifiedAuditLog -StartDate <d> -EndDate <d>

Searches sign-in and activity audit logs; for incident investigation.

Examples

  • Search-UnifiedAuditLog -StartDate (Get-Date).AddDays(-7) -EndDate (Get-Date) -Operations UserLoggedInLast 7 days of logins

Syntax

Search-UnifiedAuditLog -StartDate <d> -EndDate <d> [-Operations <op>]

Before you run it

Read-only.

Related commands

The same reference, with no signal at all

Every command on this site, held on your device. The app adds 632 more: 1,510 commands and 120 fix flows, searchable with no connection. Free to install, no ads (some content is a one-time purchase).

Get it free on the App Store