{"id":9296,"date":"2024-12-13T09:01:23","date_gmt":"2024-12-13T00:01:23","guid":{"rendered":"https:\/\/m365jp.net\/?p=9296"},"modified":"2024-12-13T09:08:43","modified_gmt":"2024-12-13T00:08:43","slug":"mc955752-change-in-behavior-of-the-highcompleteness-parameter-in-the-search-unifiedauditlog-cmdlet","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-12-13-mc955752-change-in-behavior-of-the-highcompleteness-parameter-in-the-search-unifiedauditlog-cmdlet","title":{"rendered":"MC955752 | Change in behavior of the HighCompleteness parameter in the Search-UnifiedAuditLog cmdlet"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC955752 | Change in behavior of the HighCompleteness parameter in the Search-UnifiedAuditLog cmdlet<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>12\/12\/2024 23:26:28<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>12\/12\/2024 23:26:20<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>03\/03\/2025 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>The <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255); font-family: sans-serif; font-weight: 400;\">  Search-UnifiedAuditLog cmdlet<\/a> gives administrators in your organization access to critical audit log event data to gain insights and further investigate user activities. Microsoft had introduced a new  <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps#-highcompleteness\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255); font-family: sans-serif; font-weight: 400;\">  HighCompleteness parameter<\/a> in this cmdlet in April 2024 that allowed customers to toggle between prioritizing completeness of search results and performance. When the HighCompleteness parameter is set to true, the search query returns a more complete set   of search results, but the query may take a longer time to finish. When set to false, the query runs faster but only returns a subset of results. We recommended setting the parameter to true in scenarios where a complete list of search results was required.&nbsp;<\/p>\n<p>To improve our customers\u2019 visibility into their security logging and reduce instances of customers missing out on important audit records in their search results, we are now changing the behavior of the HighCompleteness parameter. Previously, customers could   toggle the parameter between true or false. With this change, the HighCompleteness parameter will always be set to true.&nbsp;<\/p>\n<p>[When this will happen:]  <\/p>\n<p>General Availability (Worldwide, GCC, GCC-High, DoD): Starting late January 2025, for all search queries submitted via the Search-UnifiedAuditLog cmdlet, the value of the HighCompleteness parameter will be set to true.&nbsp;<\/p>\n<p>[How this will affect your organization:]  <\/p>\n<p>The HighCompleteness parameter in the Search-UnifiedAuditLog cmdlet will now be set to true for all queries. With this change, the cmdlet will now prioritize completeness of search results over performance. As a result, search queries may take longer to   finish.&nbsp;<\/p>\n<p>[What you can do to prepare:]<\/p>\n<p>You could also consider using our new <a href=\"https:\/\/learn.microsoft.com\/graph\/api\/resources\/security-auditlogquery?view=graph-rest-beta\" target=\"_blank\">  Audit Search Graph API<\/a> for programmatic access to audit logs. This API is now Generally Available to all our Worldwide and Gov customers.<\/p>\n<p>Learn more about Purview Audit: <a href=\"https:\/\/learn.microsoft.com\/purview\/audit-solutions-overview\" target=\"_blank\">  Learn about auditing solutions in Microsoft Purview | Microsoft Learn<\/a><\/p>\n<p>Learn more about the Search-UnifiedAuditLog cmdlet: <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\">  Search-UnifiedAuditLog (ExchangePowerShell) | Microsoft Learn<\/a><\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p><a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255); font-family: sans-serif; font-weight: 400;\">Search-UnifiedAuditLog \u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8<\/a>\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u7d44\u7e54\u5185\u306e\u7ba1\u7406\u8005\u306f\u91cd\u8981\u306a\u76e3\u67fb\u30ed\u30b0   \u30a4\u30d9\u30f3\u30c8 \u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3001\u5206\u6790\u60c5\u5831\u3092\u53d6\u5f97\u3057\u3001\u30e6\u30fc\u30b6\u30fc \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u3055\u3089\u306b\u8abf\u67fb\u3067\u304d\u307e\u3059\u3002Microsoft \u306f 2024 \u5e74 4 \u6708\u306b\u3053\u306e\u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306b\u65b0\u3057\u3044  <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps#-highcompleteness\" target=\"_blank\" style=\"background-color: rgb(255, 255, 255); font-family: sans-serif; font-weight: 400;\">  HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc<\/a>\u3092\u5c0e\u5165\u3057\u3001\u304a\u5ba2\u69d8\u304c\u691c\u7d22\u7d50\u679c\u306e\u5b8c\u5168\u6027\u3068\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u512a\u5148\u9806\u4f4d\u3092\u5207\u308a\u66ff\u3048\u3089\u308c\u308b\u3088\u3046\u306b\u3057\u307e\u3057\u305f\u3002HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u3092 true \u306b\u8a2d\u5b9a\u3059\u308b\u3068\u3001\u691c\u7d22\u30af\u30a8\u30ea\u306f\u3088\u308a\u5b8c\u5168\u306a\u691c\u7d22\u7d50\u679c\u306e\u30bb\u30c3\u30c8\u3092\u8fd4\u3057\u307e\u3059\u304c\u3001\u30af\u30a8\u30ea\u306e\u5b8c\u4e86\u306b\u6642\u9593\u304c\u304b\u304b\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002false \u306b\u8a2d\u5b9a\u3059\u308b\u3068\u3001\u30af\u30a8\u30ea\u306e\u5b9f\u884c\u901f\u5ea6\u306f\u901f\u304f\u306a\u308a\u307e\u3059\u304c\u3001\u7d50\u679c\u306e\u30b5\u30d6\u30bb\u30c3\u30c8\u306e\u307f\u304c\u8fd4\u3055\u308c\u307e\u3059\u3002\u691c\u7d22\u7d50\u679c\u306e\u5b8c\u5168\u306a\u30ea\u30b9\u30c8\u304c\u5fc5\u8981\u306a\u30b7\u30ca\u30ea\u30aa\u3067\u306f\u3001\u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u3092 true \u306b\u8a2d\u5b9a\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002&nbsp;<\/p>\n<p>\u304a\u5ba2\u69d8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ed\u30b0\u306e\u53ef\u8996\u6027\u3092\u5411\u4e0a\u3055\u305b\u3001\u691c\u7d22\u7d50\u679c\u3067\u91cd\u8981\u306a\u76e3\u67fb\u30ec\u30b3\u30fc\u30c9\u3092\u898b\u9003\u3059\u304a\u5ba2\u69d8\u306e\u4e8b\u4f8b\u3092\u6e1b\u3089\u3059\u305f\u3081\u306b\u3001HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u306e\u52d5\u4f5c\u3092\u5909\u66f4\u3057\u3066\u3044\u307e\u3059\u3002\u4ee5\u524d\u306f\u3001\u304a\u5ba2\u69d8\u306f\u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u3092 true \u307e\u305f\u306f false \u306e\u9593\u3067\u5207\u308a\u66ff\u3048\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3057\u305f\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u306f\u5e38\u306b true \u306b\u8a2d\u5b9a\u3055\u308c\u307e\u3059\u3002&nbsp;<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC-High\u3001DoD): 2025 \u5e74 1 \u6708\u4e0b\u65ec\u4ee5\u964d\u3001Search-UnifiedAuditLog \u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u3092\u4ecb\u3057\u3066\u9001\u4fe1\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u691c\u7d22\u30af\u30a8\u30ea\u306b\u3064\u3044\u3066\u3001HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u306e\u5024\u304c true \u306b\u8a2d\u5b9a\u3055\u308c\u307e\u3059\u3002&nbsp;<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n<p>Search-UnifiedAuditLog \u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306e HighCompleteness \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc\u304c\u3001\u3059\u3079\u3066\u306e\u30af\u30a8\u30ea\u3067 true \u306b\u8a2d\u5b9a\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001\u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306f\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3088\u308a\u3082\u691c\u7d22\u7d50\u679c\u306e\u5b8c\u5168\u6027\u3092\u512a\u5148\u3059\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u305d\u306e\u7d50\u679c\u3001\u691c\u7d22\u30af\u30a8\u30ea\u306e\u5b8c\u4e86\u306b\u6642\u9593\u304c\u304b\u304b\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002&nbsp;<\/p>\n<p>\u3010\u6e96\u5099\u3059\u308b\u305f\u3081\u306b\u3067\u304d\u308b\u3053\u3068:\u3011<\/p>\n<p>\u307e\u305f\u3001\u65b0\u3057\u3044 <a href=\"https:\/\/learn.microsoft.com\/graph\/api\/resources\/security-auditlogquery?view=graph-rest-beta\" target=\"_blank\">  \u76e3\u67fb\u691c\u7d22\u30b0\u30e9\u30d5 API<\/a> \u3092\u4f7f\u7528\u3057\u3066\u3001\u76e3\u67fb\u30ed\u30b0\u306b\u30d7\u30ed\u30b0\u30e9\u30e0\u3067\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u3082\u691c\u8a0e\u3067\u304d\u307e\u3059\u3002\u3053\u306e API \u306f\u3001\u4e16\u754c\u4e2d\u306e\u3059\u3079\u3066\u306e\u304a\u5ba2\u69d8\u3068 Gov \u306e\u304a\u5ba2\u69d8\u306b\u4e00\u822c\u63d0\u4f9b\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>Purview \u76e3\u67fb\u306e\u8a73\u7d30: <a href=\"https:\/\/learn.microsoft.com\/purview\/audit-solutions-overview\" target=\"_blank\">  Microsoft Purview \u306e\u76e3\u67fb\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u306b\u3064\u3044\u3066 |\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 \u30e9\u30fc\u30f3<\/a><\/p>\n<p>Search-UnifiedAuditLog \u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001 <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/search-unifiedauditlog?view=exchange-ps\" target=\"_blank\">  Search-UnifiedAuditLog (ExchangePowerShell) |\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 \u30e9\u30fc\u30f3<\/a><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC955752 | Change in behavior of the HighCompleteness parameter in the Search-UnifiedAuditLog cmdlet Classific [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9296","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/9296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=9296"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/9296\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=9296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=9296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=9296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}