Forum Discussion

Charlie933's avatar
Charlie933
Copper Contributor
Apr 29, 2024

Email alerts for sharepoint action "DownloadedFile"

Hi,

 

We are trying setup alerts for files being downloaded on specific executive sharepoint sites. We have created a custom alert policy in security.microsoft.com for that specific site and did few test downloads. We have not received any notifications for these activities. Tried searching the audit logs manually and there are no entries for these activities. Is there any specific setting that needs to be turned on in order to trigger the alert policy? We have activated "Reporting" in Site collection features. 

 

Thanks in advance!!

  • rikazkhan7's avatar
    rikazkhan7
    Copper Contributor
    Let's break down the process and explore potential issues that might prevent alerts from triggering.

    Check Alert Policy Configuration:
    You've already created a custom alert policy in the Microsoft 365 compliance center. Ensure that the policy is correctly configured to monitor file downloads on the specific executive SharePoint sites.
    Verify that the alert policy includes the appropriate conditions to detect file downloads, such as specific file types or file locations.
    Verify Permissions:
    Ensure that the account used to configure the alert policy has sufficient permissions to access the audit logs and receive alerts.
    Check if the account has the necessary permissions on the SharePoint site to monitor file activities.
    Audit Log Settings:
    Check the audit log settings for the SharePoint site collection. Navigate to the SharePoint admin center and review the audit log settings to ensure that file download events are being audited.
    Verify that auditing is enabled for the activities you want to monitor, including file downloads.
    Audit Log Retention:
    Confirm that the audit log retention period is sufficient to capture the file download activities. If the retention period is too short, older events might not be available for analysis.
    • Charlie933's avatar
      Charlie933
      Copper Contributor
      hi rikazkhan7, thanks for your AI generated reply but this do not address my question to the point.

Resources