Forum Discussion

Deleted

Sep 07, 2016

Sharepoint audit log gathering

Hey, we are in environment with a huge amount of site collections (+100K) and for compliance issues, we need to collect all audit log data to report on user activities accross the environment. Gi...

MVP

Sep 14, 2016

+1 to use the audit log features you have in the Security & Compliance center...by the way, in the PnP space in GitHub you can find samples about how to use CSOM to get information from the SPO change Log

Deleted

Sep 15, 2016

Thanks for your responses. The Security & Compliance center is only giving part of the functionality, as it is only covering SPO.

To clarify a bit more on the needs: we have the requirement to be able to report on who's viewed / downloaded / deleted content in a full on-prem environment which might move in the future partly to SPO (so a hybrid environment). These logs should be consultable for a longer period of time (+ 5 years). We are able to capture that data if we are reading directly from the content databases, but this is not advisable and even impossible on SPO.

jcgonzalezmartin
MVP
Sep 15, 2016
Today you are right, but in the future you can expect to have the ability to query OnPremises activity from the Security and Compliance Center...in regards of your 5 years requirement I don't think you will have for SPO data.
- Michael Blumenthal
  MVP
  Sep 15, 2016
  My understanding is that the Audit Log data for SharePoint Online is available for 90 days. If you need to keep it around longer, you will need to write somethnig to harvest and store it. Look at https://msdn.microsoft.com/office-365/office-365-management-activity-api-reference for API details.
  - Michael Blumenthal
    MVP
    Sep 15, 2016
    Also, if you are attending Microsoft Ignite 2016, there are 300 plus vendors in the Expo Hall. Some of them might have solutions for more comprehensive audit logging for on premise SharePoint.