All Apps and Add-ons

Exchange Mailbox TA Script errors

mburgess97
Path Finder
Exchange TA

I have the scripted input for the Admin Audit Log. 
 
In a nutshell the script runs the command below with additional scripting to dump to a file, etc..
Search-AdminAuditLog -StartDate $LastSeen -EndDate (Get-Date)
 
I am receiving the following error:
WARNING: An unexpected error has occurred and a Watson dump is being generated: Object reference not set to an instance of an object.

I have create a new domain account with appropriate roles in exchange.  I can also run this command successfully from the new user.

Any ideas on how to troubleshoot this?  I'm at a loss. There is nothing in the event viewer that helps.

Labels (3)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...