You are currently offline, waiting for your internet to reconnect

ItemSubject field is empty when you run the Search-MailboxAuditLog cmdlet together with the ShowDetails parameter in an Exchange Server 2010 environment

Symptoms
Consider the following scenario:
  • You enable mailbox audit logging for a mailbox in a Microsoft Exchange Server 2010 environment.
  • You perform some operations in the mailbox. For example, you soft delete an email message.
  • You run the Search-MailboxAuditLog cmdlet together with the ShowDetails parameter to retrieve the details of mailbox audit logging entries.
In this scenario, the cmdlet returns an empty value in the ItemSubject field for most operations.
Cause
This issue occurs because the cmdlet retrieves properties from a MailboxAuditLogRecord class object that does not contain the ItemSubject field.
Resolution
To resolve this issue, install the following update rollup:
2706690 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 2
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More information
For more information about how to enable or disable mailbox audit logging for a mailbox, go to the following Microsoft website:For more information about mailbox audit logging, go to the following Microsoft website:For more information about the Search-MailboxAuditLog cmdlet, go to the following Microsoft website:For more information about how to search the mailbox audit logging entries for a mailbox, go to the following Microsoft website:For more information about the MailboxAuditLogRecord class, go to the following Microsoft website:
Properties

Article ID: 2701624 - Last Review: 08/14/2012 15:12:00 - Revision: 1.0

Microsoft Exchange Server 2010 Service Pack 2

  • kbqfe kbfix kbexpertiseinter kbsurveynew KB2701624
Feedback
Ctrl = ""; document.write(" com/c.gif?DI=4050&did=1&t=">body>ge.locale}}" href="" ng-click="setLanguage(language);" class="ng-binding" id="language-es-py">Paraguay - Español
Venezuela - Español
0&did=1&t=">amp;did=1&t="> var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" d')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> >