Forum Discussion
dhilipan
Nov 24, 2023Copper Contributor
Audit Logs for O365 Policy Changes
Hello Everyone, Am trying to find changes made in safelink policies, safe attachment policies and other settings under Policies & rules -> Threat policies But unable to find the logs. Do i need ...
VasilMichev
Nov 24, 2023MVP
You can search the Unified audit log for them: https://learn.microsoft.com/en-us/purview/audit-new-search
If you want to narrow down on specific events, use the corresponding cmdlet as filter. I.e. for changes on safe links, search for Set-SafeLinksRule/Set-SafeLinksPolicy as "operation".
If you want to narrow down on specific events, use the corresponding cmdlet as filter. I.e. for changes on safe links, search for Set-SafeLinksRule/Set-SafeLinksPolicy as "operation".
dhilipan
Nov 26, 2023Copper Contributor
thanks - where exactly i can put the operation ? am playing around Unified audit log, but finding hard for me to get the logs i required
- VasilMichevNov 26, 2023MVPIn the Activities - Operation names field.
- dhilipanDec 10, 2023Copper Contributortried with New-TenantAllowBlockListItems but didnt worked