Can I recover audit logs that have been cleared/deleted?

5 pts.
Tags:
Microsoft Exchange
Office 365
Checking our organization's Office 365 admin audit logs, I see they go back less than 3 months, and suspect an Admin may have cleared them. Is there a way to recover them, and/or see who cleared them?


Software/Hardware used:
Office 365, Exchange
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Subhendu Sen
    You need to be assigned permissions before perform this procedure. To see what permissions are needed, then observe mailbox audit logging entry. However, version and OS etc information are required.
    134,650 pointsBadges:
    report
  • TheRealRaven
    If as little as even three days have gone by, it's highly unlikely you can recover anything unless the data is available on backup media.
    33,670 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: