Forum Discussion
SharePoint Online site collection Audit Logs vs Office 365 Unified Audit Logs
The thing about the Office 365 audit logs is that any entries ingested from a workload, like SharePoint, are normalized based on a known schema. This means that the information captured in the audit log from SharePoint is the same as you'd get from SharePoint, but it's in a common format that makes it easy to match SPO data with other workloads.
Is the audit log feature only available for non-group enabled site collections? I looked at https://support.office.com/en-us/article/view-audit-log-reports-b37c5869-1b47-4a82-a30d-ea20070fe527 and can certainly configure audit log settings, but I don't see any audit log reports option under site settings. The set of events look very similar to what is pumped into the Office 365 audit log by SharePoint, which is the most verbose of all the apps...
I think cfiessinger or any other of the Groups guys are the only ones that can tell us why the Audit Log Reports link is missing in the site settings page in a Group site
Agreed.
However, let me also make the observation that when a choice exists between a workload-dependent feature and an equivalent feature that works across workloads, I would always take the latter. The reason is that we deal with Office 365 rather than a workload, and Microsoft's efforts inside Office 365 always focus on features that work across the service rather than are specific to a workload (like SharePoint).