0.Collection > EX_MailboxActivity Job

The EX_MailboxActivity job collects logs of Native Mailbox Access Auditing from Exchange to provide reporting around mailbox logon activity.

The EX_MailboxActivity job is located in the 0.Collection job group.

NOTE: This job requires that Exchange Access Auditing is enabled in the Exchange environment.

Queries for the EX_MailboxActivity Job

The EX_MailboxActivity Job uses the ExchangePS Data Collector.

The following query is included with the EX_MailboxActivity job:

• Exchange Mailbox Logons – Collects data on Exchange mailbox access logons

  • By default set to search all mailboxes. It can be scoped.
  • See the Scope the ExchangePS Data Collector topic for additional information

  NOTE: The ExchangePS Data Collector is capable of targeting Exchange Online as well as Exchange on-premises environments. See the Exchange PowerShell Permissions topic for credential requirements.