check before: 2026-05-15
Product:
Exchange, Purview, Purview Communication Compliance
Platform:
Online, US Instances, World tenant
Status:
Change type:
Feature update, Admin impact
Links:
Details:
Summary:
Microsoft Purview updates the Search-UnifiedAuditLog cmdlet's ResultCount parameter to show a running count of results in real time, adding a new boolean property, AuditSearchRequestMetadata.moreRecordsAvailable, to indicate if more records remain. This improves query progress visibility and affects scripts relying on ResultCount as a final total.
Details:
[Introduction]
To improve performance and provide better visibility into query progress, we are updating the behavior of the ResultCount parameter for the Search-UnifiedAuditLog cmdlet in Microsoft Purview Audit.
Previously, the ResultCount parameter returned the total number of results expected from a query. With this update, ResultCount will display a running count of results as they are retrieved in real time.
We are also introducing a new boolean property, AuditSearchRequestMetadata.moreRecordsAvailable, which indicates whether additional records are still being retrieved.
Together, these updates provide administrators with improved transparency into audit log search progress and better support for script and automation scenarios.
[When this will happen]
General Availability (Worldwide, GCC): We began rolling out in mid-May 2026 and expect to complete by late May 2026.
General Availability (GCC High, DoD): We will begin rolling out in early June 2026 and expect to complete by late June 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-05-15
updated:
2026-05-15
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Change in ResultCount Reporting
The ResultCount parameter will now show a running count of results instead of a final total, which may lead to confusion in scripts that expect a final count before completion.
- roles: Administrators, IT Support Staff
- references: https://learn.microsoft.com/powershell/module/exchangepowershell/search-unifiedauditlog?view=exchange-ps, https://learn.microsoft.com/purview/audit-solutions-overview
Script and Automation Adjustments
Existing scripts relying on ResultCount for total results may fail or provide incorrect information, requiring updates to incorporate the new boolean property for accurate results.
- roles: Developers, Administrators
- references: https://learn.microsoft.com/powershell/module/exchangepowershell/search-unifiedauditlog?view=exchange-ps, https://learn.microsoft.com/purview/audit-solutions-overview
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 1 month ago ago
