When auditing mailbox access on Exchange 2013, you receive the following error:
“Cannot audit mailboxes stored in the AAA database on the BBB server. The “Content Index State Failed” error has occurred on your Exchange server.”
Your Exchange server databases have unhealthy status—ContextIndexState:Failed.
As a result, Netwrix Auditor cannot collect audit data about mailboxes with the Search-MailboxAuditLog cmdlet.
To determine the exact database that has failed indexes, run the following command: Get-MailboxDatabaseCopyStatus
See Microsoft documentation for more information.
Rebuild failed indexes on your Exchange server side. See Microsoft article Reseed the search catalog for more information.
After fixing the failed indexes, restart data collection.