Hello,
I have been tasked to pull a report of sent items that a user sent on behalf of a shared mailbox. i created the query below that searches the users mailbox for any emails sent from the shared mailbox email address with today's date. This query performs exactly what we need minus one thing. The log file that is generated shows the search was started 5 hours in the future (ie the log shows it was started in utc time zone even though the server is set to eastern time zone). Is this normal? Any way that we can get this to show the actual time the search was started? Below is an example of the log generated. I ran this command at 10:55 this morning and it shows that it ran at 3:55.
Search-Mailbox -Identity "mailbox name" -SearchQuery "from:email address AND sent:Today"-TargetMailbox "target mailbox" -TargetFolder "inbox" -Logonly
The search has Succeeded.
| Started by: | user |
| Start Time: | 1/5/2015 3:55:56 PM |
| Size: | 103.1 KB (105,570 bytes) |
| Items: | 9 |
| Results: | target mailbox |
| Errors: | None |
| Operations performed: | Log message created in the target mailbox. |
| ||
| Query: | from:email address AND sent:Today |
| Search Dumpster: | True |
| Logging: | Basic |
| Mailboxes to search: | mailbox to search |
See attachments for additional logging information when full logging is enabled.