I've been running into an issue since this morning where the `Search-UnifiedAuditLog` cmdlet is throwing an error: *Failed to process request via SyncSearch flag, returning HttpRequestException.* This is concerning because if you're relying on this for alerts or tracking critical events, it could mean your monitoring isn't working as expected. Interestingly, it still functions in one of my test tenants. Is anyone else facing this problem?
2 Answers
Yeah, I'm having the same problem! Ours stopped working with the same error around 24 hours ago. Super frustrating! Let me know if you find a fix.
There's a pretty straightforward fix! You just need to tweak your PowerShell script. Remove the **-SessionCommand ReturnLargeSet** line. If that doesn't work, try disabling HighCompleteness by adding **-HighCompleteness $false** to your Search-UnifiedAuditLog command. It should help!
Thanks! I just ran the cmdlet without -SessionCommand ReturnLargeSet and it works now.
How do you manage that situation?