Office 365 Best Practice: Lengthen Audit Log Age Limit.

This is part of an ongoing series of Office 365 Best Practices which should in place for every organization – big or small, business or nonprofit.

If you’ve seen my “Enable Audit Log” guide for Office 365, then you know how important it is and how to enable. By default, logs are kept for only 90 days – but we can extend that out as far as 1 year! As it costs nothing, there’s no reason not to do this: it can only help provide more long-term visibilty over user behavior when we need it.

To extend this to 1 year, follow this process:

1. Connect to Exchange Online Powerhsell. I have a guide on how to do that here.

2. Enter the following commands:

$AuditLogAgeLimit = 365

Get-Mailbox -ResultSize Unlimited | Set-Mailbox -AuditEnabled $true -AuditLogAgeLimit $AuditLogAgeLimit

…and done! The audit log has no been lengthened to 1 year,