File activity

Hello Sebastien Molendijk , 

Thanks for your reply. I now tested this in 3 tenants. 1st Tenant is our company production tenant once I upload a file to sharepoint within minutes I see the file appear in Cloud App Security under Investigate Files.  We have Office 365 audit logging enabled. This is the behavior I've seen working since ever. 

However on two tenants that I provisioned via demos.microsoft.com just recently this doesn't seem to work anymore. Yes Office 365 auditing is enabled, I can even see the activities within minutes in the Security and Compliance / Audit log search portal. But for some reason they are not showing up in Cloud App Security under Investigate Files. 

I read something about potential delays here: https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-faq#when-pulling-the-data-from-the-management-activity-api-there-is-sometimes-a-delay-of-more-than-3-to-5-days-why-is-this

But how likely is it that i am facing the same issue in two separate tenants? Anything else where i could look , i might have overlooked? 

Appreciate any hnts, since i plan to use thse demo tenants for upcomming demo's , this always just worked, but now doesn't :-) and i don't want to use our production tenant.