Consider the following scenario:
- You enable mailbox audit logging for a mailbox in a Microsoft Exchange Server 2010 environment.
- You perform some operations in the mailbox. For example, you soft delete an email message.
- You run the Search-MailboxAuditLog cmdlet together with the ShowDetails parameter to retrieve the details of mailbox audit logging entries.
This issue occurs because the cmdlet retrieves properties from a MailboxAuditLogRecord class object that does not contain the ItemSubject field.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about how to enable or disable mailbox audit logging for a mailbox, go to the following Microsoft website:Search-MailboxAuditLog cmdlet, go to the following Microsoft website:MailboxAuditLogRecord class, go to the following Microsoft website:
Article ID: 2701624 - Last Review: Aug 14, 2012 - Revision: 1
Microsoft Exchange Server 2010 Service Pack 2, Microsoft Exchange Server 2010 Enterprise, Microsoft Exchange Server 2010 Standard