Creating a task for collecting mailbox user activity audit events
To create a task for collecting mailbox user activity audit events:On the main menu, click Data collectionTasks.Click Create taskData collection.Enter a task name.Select the Microsoft Exchange 2010 or later (mailbox audit) profile.Select an OS user credential.
In the hierarchical list, select Running the script, and under Script settings, configure the settings for running the script (see the table below).
If required, select an MP 10 Collector for event collection.In the Network addresses box, enter the source server domain name.
In the Schedule panel, you can enable and configure the automatic task start.
Click Save.
Script settings for profile "Microsoft Exchange 2010 or later (mailbox audit)"

Parameter

Description

Default value

batch_size

Number of mailboxes for which events are simultaneously collected (0 if unlimited)

100

first_run_seconds_range

Period before the first start of the task in seconds. Event data for this period will be collected before real-time data collection starts. Must be a numeric value

0

powershell_auth_type

Windows PowerShell authentication type. Possible values are Default, Basic, Credssp, Digest, Kerberos, Negotiate, or NegotiateWithImplicitCredential

"Kerberos"

powershell_encoding

Exchange Management Shell character encoding. Possible values: default and utf8

"default"

powershell_timeout

Windows PowerShell session timeout in seconds

540

terminal_encoding

Windows PowerShell console character encoding

"windows-1251"

The website uses cookies according to the cookie policy.