{"id":5959,"date":"2024-04-12T08:00:55","date_gmt":"2024-04-11T23:00:55","guid":{"rendered":"https:\/\/m365jp.net\/?p=5959"},"modified":"2024-04-12T08:15:52","modified_gmt":"2024-04-11T23:15:52","slug":"mc775358-microsoft-purview-audit-new-highcompleteness-parameter-in-search-unifiedauditlog-audit-cmdlet","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-04-12-mc775358-microsoft-purview-audit-new-highcompleteness-parameter-in-search-unifiedauditlog-audit-cmdlet","title":{"rendered":"MC775358 | Microsoft Purview | Audit: New HighCompleteness parameter in Search-UnifiedAuditLog Audit cmdlet"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC775358 | Microsoft Purview | Audit: New HighCompleteness parameter in Search-UnifiedAuditLog Audit cmdlet<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>04\/11\/2024 22:41:01<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>04\/11\/2024 22:40:36<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>08\/30\/2024 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>In Microsoft Purview Audit, the <code>Search-UnifiedAuditLog<\/code>&nbsp;cmdlet in Microsoft Exchange Online PowerShell is used to retrieve Audit logs from a specific date range or filtered results based on specified criteria. Very large queries aimed at retrieving   a large number of audit records are susceptible to timeouts and may miss some results. With this new feature, we are introducing the  <code>HighCompleteness<\/code> parameter to the cmdlet.  <\/p>\n<p>Please note that using this parameter can result in results being returned more slowly.  <\/p>\n<p>This message is associated with Microsoft 365 Roadmap ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=388735\" target=\"_blank\" rel=\"noopener\">  388735<\/a>.  <\/p>\n<p>[When this will happen:]  <\/p>\n<p>General Availability (Worldwide, GCC, GCC High, DOD): We will begin rolling out early May 2024 and expect to complete by late May 2024.  <\/p>\n<p>[How this will affect your organization:]  <\/p>\n<p>When enabled, the <code>HighCompleteness<\/code> parameter will provide a more exhaustive and comprehensive set of audit log records by prioritizing completeness of search results over speed of retrieval. When disabled, the query runs faster but may have   missing search results.  <\/p>\n<p>There will be no immediate impact to your existing use of <code>Search-UnifiedAuditLog<\/code>. To use the new  <code>HighCompleteness<\/code> parameter, please refer to this sample request:  <\/p>\n<p><code>Search-UnifiedAuditLog -StartDate 5\/1\/2023 -EndDate 5\/2\/2023 -HighCompleteness true<\/code>  <\/p>\n<p>Learn more: <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\" rel=\"noopener\">  Search-UnifiedAuditLog (ExchangePowerShell) | Microsoft Learn<\/a>  <\/p>\n<p>[What you need to do to prepare:]  <\/p>\n<p>This rollout will happen automatically by the specified date with no admin action required. You may want to notify your users about this change and update any relevant documentation as appropriate.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>Microsoft Purview \u76e3\u67fb\u3067\u306f\u3001Microsoft Exchange Online PowerShell \u306e\u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u3092\u4f7f\u7528\u3057\u3066\u3001 <code>  Search-UnifiedAuditLog<\/code>&nbsp;\u7279\u5b9a\u306e\u65e5\u4ed8\u7bc4\u56f2\u304b\u3089\u76e3\u67fb\u30ed\u30b0\u3092\u53d6\u5f97\u3059\u308b\u304b\u3001\u6307\u5b9a\u3057\u305f\u6761\u4ef6\u306b\u57fa\u3065\u3044\u3066\u30d5\u30a3\u30eb\u30bf\u30fc\u51e6\u7406\u3055\u308c\u305f\u7d50\u679c\u3092\u53d6\u5f97\u3057\u307e\u3059\u3002\u591a\u6570\u306e\u76e3\u67fb\u30ec\u30b3\u30fc\u30c9\u3092\u53d6\u5f97\u3059\u308b\u3053\u3068\u3092\u76ee\u7684\u3068\u3057\u305f\u975e\u5e38\u306b\u5927\u304d\u306a\u30af\u30a8\u30ea\u306f\u3001\u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\u306e\u5f71\u97ff\u3092\u53d7\u3051\u3084\u3059\u304f\u3001\u4e00\u90e8\u306e\u7d50\u679c\u3092\u898b\u9003\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u65b0\u6a5f\u80fd\u3067\u306f\u3001\u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306b\u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u304c\u5c0e\u5165\u3055\u308c  <code>HighCompleteness<\/code> \u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u7d50\u679c\u304c\u8fd4\u3055\u308c\u308b\u306e\u304c\u9045\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u306b\u6ce8\u610f\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306f\u3001Microsoft 365 \u30ed\u30fc\u30c9\u30de\u30c3\u30d7 ID 388735\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=388735\" target=\"_blank\" rel=\"noopener\">  \u3066\u3044\u307e\u3059<\/a>\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DOD): 2024 \u5e74 5 \u6708\u4e0a\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012024 \u5e74 5 \u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u7d44\u7e54\u306b\u53ca\u307c\u3059\u5f71\u97ff:]<\/p>\n<p>\u6709\u52b9\u306b\u3059\u308b\u3068\u3001\u3053\u306e <code>HighCompleteness<\/code> \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u306f\u3001\u53d6\u5f97\u901f\u5ea6\u3088\u308a\u3082\u691c\u7d22\u7d50\u679c\u306e\u5b8c\u5168\u6027\u3092\u512a\u5148\u3059\u308b\u3053\u3068\u3067\u3001\u3088\u308a\u7db2\u7f85\u7684\u3067\u5305\u62ec\u7684\u306a\u76e3\u67fb\u30ed\u30b0 \u30ec\u30b3\u30fc\u30c9\u306e\u30bb\u30c3\u30c8\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002\u7121\u52b9\u306b\u3059\u308b\u3068\u3001\u30af\u30a8\u30ea\u306e\u5b9f\u884c\u901f\u5ea6\u306f\u901f\u304f\u306a\u308a\u307e\u3059\u304c\u3001\u691c\u7d22\u7d50\u679c\u304c\u6b20\u843d\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u306e\u65e2\u5b58\u306e\u4f7f\u7528 <code>Search-UnifiedAuditLog<\/code>\u306b\u76f4\u3061\u306b\u5f71\u97ff\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u65b0\u3057\u3044 <code>HighCompleteness<\/code> \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u3092\u4f7f\u7528\u3059\u308b\u306b\u306f\u3001\u6b21\u306e\u30b5\u30f3\u30d7\u30eb\u8981\u6c42\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p><code>Search-UnifiedAuditLog -StartDate 5\/1\/2023 -EndDate 5\/2\/2023 -HighCompleteness true<\/code>  <\/p>\n<p>\u8a73\u7d30\u60c5\u5831: <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\" rel=\"noopener\">  Search-UnifiedAuditLog (ExchangePowerShell) |Microsoft Learn (\u82f1\u8a9e)<\/a>  <\/p>\n<p>[\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u7ba1\u7406\u8005\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u901a\u77e5\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u95a2\u9023\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC775358 | Microsoft Purview | Audit: New HighCompleteness parameter in Search-UnifiedAuditLog Audit cmdlet Cl [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-5959","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/5959","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=5959"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/5959\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=5959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=5959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=5959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}