Forum Discussion
Missing Audit Log Data
We have a list in SPO site that has many items added every week. The O365 Audit Log in the Security and Compliance center is not showing any of the events for this list. Has anyone else noticed this type of problem?
Dean_Gross Do the audit records exist in the audit log? Can you find them with PowerShell if you run
$recs = search-unifiedauditlog -Operations listItemCreated -StartDate 1-Aug-2019 -EndDate 24-Aug-2019
The point is that sometimes the SCC audit log search doesn't return all available data....
It's hardly the first time data is missing from the unified log, I can bet anything it wont be the last either. Check the SPO audit logs and open a support case.
