Commands › Exchange Online

Get-AggregateZapReport

Exchange Online ExchangeOnlineManagement Get-*

View aggregate information about zero-hour auto purge (ZAP) activity. By default, the cmdlet shows the last three days of activity, but you can specify up to ten days.

Quick start script

# Get-AggregateZapReport — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-AggregateZapReport | Format-List

# 3. Export for evidence / drift tracking
Get-AggregateZapReport | Export-Clixml .\AggregateZapReport-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-AggregateZapReport
 [[-EndDate] <System.DateTime>]
 [[-Page] <Int32>]
 [[-PageSize] <Int32>]
 [[-StartDate] <System.DateTime>]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	What it controls
-EndDate	DateTime	The EndDate parameter specifies the end date of the date range.
-Page	Int32	The Page parameter specifies the page number of the results you want to view. Valid input for this parameter is an integer between 1 and 1000. The default value is 1.
-PageSize	Int32	The PageSize parameter specifies the maximum number of entries per page. Valid input for this parameter is an integer between 1 and 5000. The default value is 1000.
-StartDate	DateTime	The StartDate parameter specifies the start date of the date range.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.