You have a Microsoft 365 tenant. You discover that administrative tasks are unavailable in the Microsoft Office 365 audit logs of the tenant. You run the Get-AdminAuditLogConfig cmdlet and receive…

The correct answer is B. UnifiedAuditLogIngestionEnabled. The 'UnifiedAuditLogIngestionEnabled' attribute controls whether audit records are ingested into the Microsoft 365 Unified Audit Log. When this is set to False, no audit data (including administrative activity) flows into the audit log, making the logs appear empty or…

Submitted by noor.lb· Apr 18, 2026Manage compliance by using Microsoft Purview

Question

You have a Microsoft 365 tenant. You discover that administrative tasks are unavailable in the Microsoft Office 365 audit logs of the tenant. You run the Get-AdminAuditLogConfig cmdlet and receive the following output:

You need to ensure that administrative tasks are logged in the Office 365 audit logs. Which attribute should you modify?

Exhibit

Options

ATestCmdletLoggingEnabled
BUnifiedAuditLogIngestionEnabled
CAdminAuditLogEnabled

How the community answered

(31 responses)

A
32% (10)
B
52% (16)
C
16% (5)

Explanation

The 'UnifiedAuditLogIngestionEnabled' attribute controls whether audit records are ingested into the Microsoft 365 Unified Audit Log. When this is set to False, no audit data (including administrative activity) flows into the audit log, making the logs appear empty or incomplete. Setting it to True via Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true re-enables ingestion. 'AdminAuditLogEnabled' (C) controls Exchange admin auditing specifically but does not govern the unified audit log pipeline. 'TestCmdletLoggingEnabled' (A) controls whether test cmdlets are logged and is unrelated to the broader administrative audit log.

Topics

#Unified Audit Log#Office 365 audit logs#AdminAuditLogConfig#Audit logging

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice