Forum Discussion
Audit Log Lags?
What is the lag time for the Security and Compliance centre Audit Logs?
To give an idea of the lag we've noticed, a user did some things on Wednesday morning our time. The logs did not show the activity on Thursday at 6 PM and only showed this on Friday morning (they may have appeared overnight but I wasn't watching then).
Is there any way to know if the audit logs are lagging?
Depends on the time of event and whether the service decided to perform as advertised on that day :)
There's a table here: https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c#PickTab=BYB
But you will often find that the SLAs are not met, in some cases it might even be days before the events appear.
1 Reply
Depends on the time of event and whether the service decided to perform as advertised on that day :)
There's a table here: https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c#PickTab=BYB
But you will often find that the SLAs are not met, in some cases it might even be days before the events appear.