Forum Discussion
Sharepoint audit log gathering
Deleted, have you looked at the audit log reports built into Office 365?
In the Admin application, go to Admin Centers and open the Compliance admin center. In the Compliance (aka Security & Compliance) center, expand "Search & investigation" in the left navigation, and click on "Audit log search". You can also read more about the Audit log search at https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US
Do you neede to keep the audit log data for more than 90 days?
- +1 to use the audit log features you have in the Security & Compliance center...by the way, in the PnP space in GitHub you can find samples about how to use CSOM to get information from the SPO change Log
Thanks for your responses. The Security & Compliance center is only giving part of the functionality, as it is only covering SPO.
To clarify a bit more on the needs: we have the requirement to be able to report on who's viewed / downloaded / deleted content in a full on-prem environment which might move in the future partly to SPO (so a hybrid environment). These logs should be consultable for a longer period of time (+ 5 years). We are able to capture that data if we are reading directly from the content databases, but this is not advisable and even impossible on SPO.
- Today you are right, but in the future you can expect to have the ability to query OnPremises activity from the Security and Compliance Center...in regards of your 5 years requirement I don't think you will have for SPO data.
