You may encounter some errors when you disable or enable Microsoft 365 tenant audit logging.
“Get-AdminAuditLogConfig : The term ‘Get-AdminAuditLogConfig’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.”
Some feature must be installed on your computer, like modules.
Import-Module ExchangeOnlineManagement
if you encounter some errors like this following below ;
You have to change execution policy.
Set-ExecutionPolicy RemoteSigned
Again Import-Module ExchangeOnlineManagement it is worked.
After auditlog run to powershell command.
First step view
Get-AdminAuditLogConfig | FL UnifiedAuditLogIngestionEnabled
and second step if it is false change to true.
Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $false