Forum Discussion
JasonDunkin
May 23, 2025Copper Contributor
Auditing email alerts
We share files via sharepoint online with external and internal users. We also setup alerts on the document libraries for things like when files are shared with the users. The alert is sent out via t...
java-study87123
Jun 16, 2025Copper Contributor
We've hit the same limitation. One workaround is enabling Unified Audit Logs and looking for "SharingSet" operations in the logs.5CKEt5uceZR3D6ADFDF69ACDF627F4D9EAC74E33D72E36F6F54FE357D6269F349722AE4DB6B042FEE5D4A4695E0110F6A042A72DF2B92E4E3186FyiCajlEiwDIt doesn't show email delivery, but at least shows when a share was initiated.You might try setting up a DLP policy or Defender alert that triggers when content is shared externally — not a perfect solution, but it could help trace activity even if email delivery isn’t directly logged.