Commands › Exchange Online

Get-EventLogLevel

Exchange Online ExchangeOnlineManagement Get-*

Display a list of Exchange event categories and the corresponding log levels on Exchange servers.

Quick start script

# Get-EventLogLevel — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-EventLogLevel -Server <ServerIdParameter> | Format-List

# 3. Export for evidence / drift tracking
Get-EventLogLevel | Export-Clixml .\EventLogLevel-$(Get-Date -Format yyyyMMdd).xml

Syntax — 2 parameter sets

Server

Get-EventLogLevel -Server <ServerIdParameter>
 [-DomainController <Fqdn>]
 [<CommonParameters>]

Identity

Get-EventLogLevel [[-Identity] <ECIdParameter>]
 [-DomainController <Fqdn>]
 [<CommonParameters>]

Parameters (3)

Parameter	Type	Required	What it controls
-Identity	ECIdParameter		The Identity parameter filters the results by the name of the event category. To see the available event categories, run the following command: Get-EventLogLevel.
-Server	ServerIdParameter	yes	The Server parameter specifies the Exchange server where you want to run this command. You can use any value that uniquely identifies the server. For example:
-DomainController	Fqdn		The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name...

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.