We have message tracking log enabled for one month and able to search messages against tracking logs but when i use message tracking with eventid expand command it is giving output for only 7 days.
Get-MessageTrackingLog -resultsize unlimited -messagesubject "Information Security Awareness - SPAM & PHISHING ATTACK!!!" -EventID Expand -server servername | ? {$_.RelatedRecipientAddress -like "ausr@test.com"}