Is there a way to get the recipient name or channel team in DLP Teams Policy Audit logs

%3CLINGO-SUB%20id%3D%22lingo-sub-1497761%22%20slang%3D%22en-US%22%3EIs%20there%20a%20way%20to%20get%20the%20recipient%20name%20or%20channel%20team%20in%20DLP%20Teams%20Policy%20Audit%20logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1497761%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20created%20a%20Teams%20DLP%20Policy%20and%20when%20there%20is%20sensitive%20information%20is%20shared%20externally%20need%20to%20get%20the%20alert.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20set%20the%20notification%20and%20when%20the%20conditions%20met%20able%20to%20see%20the%20notification.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebut%20in%20Audit%20logs%20not%20seeing%20the%20external%20recipient%20name%20or%20the%20channel%20name%20the%20sensitive%20info%20is%20shared%20with.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20is%20there%20any%20way%20to%20get%20the%26nbsp%3Brecipient%20name%20or%20the%20channel%20name%20in%20the%20Audit%20logs%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1497761%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1500334%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20there%20a%20way%20to%20get%20the%20recipient%20name%20or%20channel%20team%20in%20DLP%20Teams%20Policy%20Audit%20logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1500334%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F709789%22%20target%3D%22_blank%22%3E%40ss1247%3C%2FA%3E%26nbsp%3B%20%26nbsp%3BThis%20doc%20was%20published%20in%20May%202020%20and%20may%20answer%20your%20question.%26nbsp%3B%20If%20not%2C%20let%20us%20know%20and%20we'll%20see%20if%20the%20community%20has%20specific%20suggestions.%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fdlp-microsoft-teams%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fdlp-microsoft-teams%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1506312%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20there%20a%20way%20to%20get%20the%20recipient%20name%20or%20channel%20team%20in%20DLP%20Teams%20Policy%20Audit%20logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506312%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F668458%22%20target%3D%22_blank%22%3E%40ThereseSolimeno%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20in%20the%20Audit%20logs%20the%20recipient%20name%20%2F%20Channel%20name%20is%20not%20projected%20.%20Yes%20if%20in%20the%20notifications%20tab%20provided%20the%20email%20is%20get%20these%20details.%3C%2FP%3E%3CP%3EBut%20the%20requirement%20is%20to%20get%20the%20details%20in%20Audit%20logs%20so%20that%20can%20create%20the%20dashboards%20to%20monitor.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We have created a Teams DLP Policy and when there is sensitive information is shared externally need to get the alert.

 

We have set the notification and when the conditions met able to see the notification.

 

but in Audit logs not seeing the external recipient name or the channel name the sensitive info is shared with.

 

So is there any way to get the recipient name or the channel name in the Audit logs

2 Replies

Hi @ss1247   This doc was published in May 2020 and may answer your question.  If not, let us know and we'll see if the community has specific suggestions.  https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams?view=o365-worldwide

Hi @ThereseSolimeno 

 

No in the Audit logs the recipient name / Channel name is not projected . Yes if in the notifications tab provided the email is get these details.

But the requirement is to get the details in Audit logs so that can create the dashboards to monitor.