Forum Discussion
SharePoint Online site collection Audit Logs vs Office 365 Unified Audit Logs
- Jul 07, 2018
The thing about the Office 365 audit logs is that any entries ingested from a workload, like SharePoint, are normalized based on a known schema. This means that the information captured in the audit log from SharePoint is the same as you'd get from SharePoint, but it's in a common format that makes it easy to match SPO data with other workloads.
- Sai GuttaJul 05, 2018Iron Contributor
Thank you Juan for quick response.
I agree that office 365 audit logs provide much more than sharepoint, because it covers exchange and other office 365 products.
By turning off SPO audit logs, I will still be able to pull all the logs related to SPO(that were being covered under SPO audit logs) through office 365 audit logs am I right ?
- TonyRedmondJul 07, 2018MVP
The thing about the Office 365 audit logs is that any entries ingested from a workload, like SharePoint, are normalized based on a known schema. This means that the information captured in the audit log from SharePoint is the same as you'd get from SharePoint, but it's in a common format that makes it easy to match SPO data with other workloads.
- Sai GuttaJul 08, 2018Iron ContributorThank you Juan and Tony, this helps for sure.