Auditing Tab

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises

Topic Last Modified: 2010-05-13

Use the Auditing tab to run reports or export entries from the mailbox audit log and the administrator audit log.

• The mailbox audit log records whenever a mailbox is accessed by someone other than the person who owns the mailbox. This can help you determine who has accessed a mailbox and what they have done.
  
• The administrator audit log records any action, based on a Windows PowerShell cmdlet, performed by an administrator. This can help you troubleshoot configuration issues or identify the cause of security- or compliance-related problems.
  

Report results are displayed in the Exchange Control Panel. When you search the audit logs and export the search results, Microsoft Exchange saves them in an XML file and attaches it to an e-mail message sent to a list of recipients. For more information, see Use Auditing Reports in Exchange Online.

• Run a Non-Owner Mailbox Access Report   Use this report to find mailboxes that have been accessed by someone other than the person who owns the mailbox.
  
• Run a Litigation Hold Report   Use this report to find mailboxes that were put on or removed from litigation hold.
  
• Run an Administrator Role Group Report   Use this report to search for changes made to administrator role groups.
  
• Export Mailbox Audit Logs   Select this option to search for and export entries from the mailbox audit log. Search results are saved to an XML file that is e-mailed to selected recipients.
  
• Export the Administrator Audit Log   Select this option to search for and export entries from the administrator audit log. Search results are saved to an XML file that is e-mailed to selected recipients.