Exchange Admin Audit Logs

BShiver — Thu, 13 Jun 2024 06:38:29 GMT

I am looking for recommendations on how to ingest our Exchange server 2016 Admin Audit logs into Dynatrace. I have not seen any documentation around this specifically. These logs are stored in a hidden mailbox instead of a file. I am hoping someone else has already solved for this and can point me in the right direction. I can say that we are currently ingesting them into Splunk, and that tool executes a PowerShell script to dump the logs. I am hoping that Dynatrace has something similar in place so we can move away from Splunk.

Any help is appreciated.

Re: Exchange Admin Audit Logs

ChadTurner — Tue, 02 Sep 2025 12:41:09 GMT

How are the logs being sent to splunk? You could look at setting up a log pipeline from exchange endpoint to Dynatrace. I am curious though how splunk is achieving, because we can always reverse engineer that.

topic Exchange Admin Audit Logs in Log Analytics

Exchange Admin Audit Logs

Re: Exchange Admin Audit Logs