Aug 22 2019 11:28 AM
We have a list in SPO site that has many items added every week. The O365 Audit Log in the Security and Compliance center is not showing any of the events for this list. Has anyone else noticed this type of problem?
Aug 23 2019 12:31 AM
It's hardly the first time data is missing from the unified log, I can bet anything it wont be the last either. Check the SPO audit logs and open a support case.
Aug 23 2019 01:50 AM
@Dean Gross Do the audit records exist in the audit log? Can you find them with PowerShell if you run
$recs = search-unifiedauditlog -Operations listItemCreated -StartDate 1-Aug-2019 -EndDate 24-Aug-2019
The point is that sometimes the SCC audit log search doesn't return all available data....