So I found a great little note on someone\'s blog that the search-adminauditlog command only returns 1000 lines and you have to just tighten your query to return everything.