Audit log search in Security / Compliance Centers

%3CLINGO-SUB%20id%3D%22lingo-sub-369357%22%20slang%3D%22en-US%22%3EAudit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369357%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20it%20looks%20like%20the%20new%20Security%20and%20Compliance%20Centers%20have%20arrived%20in%20my%20tenant%20overnight.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can't%20see%20anything%20obvious%20though%20as%20to%20where%20the%20audit%20log%20search%20capability%20has%20moved%20to%3F%20I've%20gone%20back%20directly%20to%20the%20old%20combined%20portal%20and%20got%20what%20I%20needed%20there%20(and%20ultimately%20I%20could%20use%20PowerShell%20if%20required)%2C%20but%20it'd%20be%20nice%20to%20know%20where%20I%20should%20look%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-369357%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%20center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-377033%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377033%22%20slang%3D%22en-US%22%3E%3CP%3E%40Deleted%26nbsp%3B%20Thanks%20for%20sharing.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20blogged%20that%20Microsoft%20needs%20to%20give%20more%20focus%20to%20Secure%20Score%20in%20the%20main%20portal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20title%3D%22Making%20Office%20365%20Secure%20Score%20More%20Accessible%20and%20Powerful%22%20href%3D%22https%3A%2F%2Fblog.admindroid.com%2Fmaking-office-365-secure-score-more-accessible-and-powerful%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblog.admindroid.com%2Fmaking-office-365-secure-score-more-accessible-and-powerful%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHappy%20that%20it's%20now%20happening%20and%20hope%20that%20Office%20365%20Secure%20Score%20is%20now%20going%20to%20reach%20a%20wider%20audience.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-375840%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-375840%22%20slang%3D%22en-US%22%3EScreenshots%20attached.%20I've%20had%20a%20quick%20run-around%20and%20can't%20find%20the%20Audit%20logs%20in%20the%20new%20UIs.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-370002%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-370002%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F274896%22%20target%3D%22_blank%22%3E%40Steve-Ironside%3C%2FA%3E%26nbsp%3BCan't%20wait!%20Could%20you%20share%20us%20the%20screenshot%20of%20the%20new%20portals%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369558%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369558%22%20slang%3D%22en-US%22%3E%3CP%3EHello!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20I%20checked%2C%20we%20have%20two%20different%20admin%20centers%20in%20place%20one%20is%20Security%20and%20the%20other%20one%20is%20Compliance.%20But%20if%20I%20go%20to%20any%20of%20the%20admin%20centers%20from%20these%20two%2C%20the%20URL%20is%20showing%20same%20(%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%3C%2FA%3E)%20and%20the%20features%20also%20look%20identical.%20I%20am%20not%20sure%20anything%20has%20changed%20except%20some%20new%20features%20added%20like%20File%20Plan%20%26amp%3B%20Events.%26nbsp%3B%3C%2FP%3E%3CP%3EAudit%20log%20search%20is%20in%20the%20same%20section%20'Search%20%26amp%3B%20Investigation'.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369540%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369540%22%20slang%3D%22en-US%22%3E%3CP%3EThose%20are%20early%20preview%20versions%2C%20they%20lack%20tons%20of%20features.%20Keep%20using%20the%20good%20old%20SCC.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369470%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20search%20in%20Security%20%2F%20Compliance%20Centers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369470%22%20slang%3D%22en-US%22%3EI%20don't%20have%20them%20yet%20so%20I%20cannot%20check%20this%2C%20but%20we%20are%20supposed%20to%20have%20a%20Compliance%20Admin%20Center%20and%20a%20Security%20Admin%20Center...the%20Audit%20Log%20Search%20should%20be%20in%20one%20of%20them%3C%2FLINGO-BODY%3E
Regular Visitor

So it looks like the new Security and Compliance Centers have arrived in my tenant overnight.

 

I can't see anything obvious though as to where the audit log search capability has moved to? I've gone back directly to the old combined portal and got what I needed there (and ultimately I could use PowerShell if required), but it'd be nice to know where I should look?

 

6 Replies
I don't have them yet so I cannot check this, but we are supposed to have a Compliance Admin Center and a Security Admin Center...the Audit Log Search should be in one of them

Those are early preview versions, they lack tons of features. Keep using the good old SCC.

Hello!

 

As I checked, we have two different admin centers in place one is Security and the other one is Compliance. But if I go to any of the admin centers from these two, the URL is showing same (https://protection.office.com) and the features also look identical. I am not sure anything has changed except some new features added like File Plan & Events. 

Audit log search is in the same section 'Search & Investigation'. 

 

@Steve-Ironside Can't wait! Could you share us the screenshot of the new portals?

Screenshots attached. I've had a quick run-around and can't find the Audit logs in the new UIs.

@Deleted  Thanks for sharing. 

 

I just blogged that Microsoft needs to give more focus to Secure Score in the main portal.

 

https://blog.admindroid.com/making-office-365-secure-score-more-accessible-and-powerful/

 

Happy that it's now happening and hope that Office 365 Secure Score is now going to reach a wider audience.