Forum Discussion

Brass Contributor

Feb 08, 2018

Query on Audit Policy Alert

Hi there I have sharing alert setup in the Office 365 DLP audit policy, just wondering if anyone knows a way to get an alert that has more information - like who the file or site was shared wi...

Audit Policy

SharePoint Online

Gerry Morley

Brass Contributor

Feb 08, 2018

Pablo R. Ortiz Thanks for that - good to know. Would be great if that detail could be in the email to save having to check for the info in the audit policy but I doubt it can. Will have to see if I can find a tool or report that might give me more information in one overall reports - as the audit policy is time consuming to go through for each entry.

Pablo R. Ortiz

Iron Contributor

Feb 08, 2018

If you have Office 365 E5 then you can use "Office 365 Cloud App Security" for advanced alerts:

https://support.office.com/en-gb/article/get-ready-for-office-365-cloud-app-security-d9ee4d67-f2b3-42b4-9c9e-c4529904990a?ui=en-US&rs=en-GB&ad=GB

Also, you can play with with Powershell and the Saerch-UnifiedAuditLog cmdlet together with Send-MailMessage to generate your own customized reports.

https://technet.microsoft.com/en-us/library/mt238501%28v=exchg.160%29.aspx?f=255&MSPPError=-2147217396

https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/send-mailmessage?view=powershell-5.1

Please mark my reply as accepted if it helped. Thanks.