Audit Log Explaination

%3CLINGO-SUB%20id%3D%22lingo-sub-1283001%22%20slang%3D%22en-US%22%3EAudit%20Log%20Explaination%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1283001%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EWas%20going%20through%20Audit%20logs%20today%20to%20see%20user%20activity%20and%20noticed%20unusual%20entries.%3C%2FP%3E%3CP%3EAnyone%20can%20advise%20on%20this%20please%20as%20we%20do%20not%20have%20any%20such%20user%20and%20also%20no%20IP%20address%20entry%3F%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EDate%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20ng-binding%22%3E2020-04-05%2018%3A23%3A16%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EIP%20address%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20ng-binding%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EUser%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20ng-binding%22%3Eecomaccounts%40globalpay.com%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EActivity%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20ng-binding%22%3ESupervisionRuleMatch%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EItem%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%22%3E%3CE4C395D45B0A4EB9A0A8FC8F166122E0%3E%3C%2FE4C395D45B0A4EB9A0A8FC8F166122E0%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%22%3EDetail%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22panel%20panel-collpase-block%22%3E%3CDIV%20class%3D%22panel-heading%22%3E%3CDIV%20class%3D%22panel-title%22%3E%3CSPAN%3EMore%20information%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22panel-body%20in%20collapse%22%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3ECreationTime%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E2020-04-05T17%3A23%3A16%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EId%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E7506dd2e-56b2-49df-8a44-08d7d98606e7%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EIsPolicyHit%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3Etrue%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EObjectId%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E%3CE4C395D45B0A4EB9A0A8FC8F166122E0%3E%3C%2FE4C395D45B0A4EB9A0A8FC8F166122E0%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EOperation%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3ESupervisionRuleMatch%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EOrganizationId%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3ERecordType%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E68%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3ESRPolicyMatchDetails%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20ng-scope%22%3E%3CPRE%3E%7B%0A%20%20%22SRPolicyId%22%3A%20%22a8d58f33-4a52-4fa1-a68c-19d0516c03d9%22%2C%0A%20%20%22SRPolicyName%22%3A%20%22Exemployee%22%2C%0A%20%20%22SRRuleMatchDetails%22%3A%20%5B%5D%0A%7D%3C%2FPRE%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EUserId%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3Eecomaccounts%40globalpay.com%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EUserKey%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3ESupervisionStoreDeliveryAgent%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EUserType%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E0%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EVersion%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3E1%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22row%20ng-scope%22%3E%3CDIV%20class%3D%22col-md-3%20form-control-title%20auditEntryAttribute%20ng-binding%22%3EWorkload%3A%3C%2FDIV%3E%3CDIV%20class%3D%22col-md-9%20auditEntryAttribute%20ng-binding%20ng-scope%22%3EExchange%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1283001%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%20Center%20Audit%20Log%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1283961%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20Explaination%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1283961%22%20slang%3D%22en-US%22%3EBest%20you%20can%20do%20here%20is%20to%20open%20a%20support%20ticket%20so%20Microsoft%20engineers%20can%20investigate%20the%20issue%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1722248%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20Explaination%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1722248%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F610186%22%20target%3D%22_blank%22%3E%40usmanmughal%3C%2FA%3E%26nbsp%3BDid%20you%20ever%20get%20a%20response%20from%20MS%20or%20know%20what%20the%20%22supervisionrulematch%22%20event%20is%20all%20about%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi,

Was going through Audit logs today to see user activity and noticed unusual entries.

Anyone can advise on this please as we do not have any such user and also no IP address entry?

 
Date:
2020-04-05 18:23:16
IP address:
 
User:
ecomaccounts@globalpay.com
Activity:
SupervisionRuleMatch
Item:
<E4C395D45B0A4EB9A0A8FC8F166122E0@realexpayments.com>
Detail:
 
More information
CreationTime:
2020-04-05T17:23:16
Id:
7506dd2e-56b2-49df-8a44-08d7d98606e7
IsPolicyHit:
true
ObjectId:
<E4C395D45B0A4EB9A0A8FC8F166122E0@realexpayments.com>
Operation:
SupervisionRuleMatch
OrganizationId:
 
RecordType:
68
SRPolicyMatchDetails:
{
  "SRPolicyId": "a8d58f33-4a52-4fa1-a68c-19d0516c03d9",
  "SRPolicyName": "Exemployee",
  "SRRuleMatchDetails": []
}
UserId:
ecomaccounts@globalpay.com
UserKey:
SupervisionStoreDeliveryAgent
UserType:
0
Version:
1
Workload:
Exchange

 

 
2 Replies
Best you can do here is to open a support ticket so Microsoft engineers can investigate the issue

@usmanmughal Did you ever get a response from MS or know what the "supervisionrulematch" event is all about ?