Hi All, I want to know where's the location log/files if I enabled mailbox audit for certain users located ? I know I can export it to xml and generate it from ECP, the configuration only mention AgeLimit, is there any chance Exchange Server export it to Event Viewer or Logging folder, cause I couldn't find it. I'm using Exchange Server 2010 SP1Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna

Understanding Mailbox Audit Logging Log entries are stored in the Audits subfolder of the audited mailbox Recoverable Items folder. This ensures that all audit logs are available from a single location, regardless of which client access method was used to access the mailbox or which server or workstation an administrator used to access the mailbox audit log. If you move a mailbox to another Mailbox server, the mailbox audit logs for that mailbox are also moved because they're located in the mailbox. As far as I know, the only options to export the logs are the ones described in that article.

Hi, From where I can check Audits subfolder specially from the Admin side ?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna

Hi, From where I can check Audits subfolder specially from the Admin side ? Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna You should only search it using the supported methods listed in that arcticle. In theory you could use MFCMAPI to access it as well however I woudlnt recommend that.

Yes, I know that, focusing in my question, where's the log audit are located. I mean, if we search it where is the exact "store/location" which is reside :)Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna

Yes, I know that, focusing in my question, where's the log audit are located. I mean, if we search it where is the exact "store/location" which is reside :) Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna If open the mailbox using mfcmapi, you should be able to see the Audit folder. Make sure your Outlook Profile is online mode when you do that.

Yes, I know that, focusing in my question, where's the log audit are located. I mean, if we search it where is the exact "store/location" which is reside :) Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter: @ikrisna If open the mailbox using mfcmapi, you should be able to see the Audit folder. Make sure your Outlook Profile is online mode when you do that.