Policy alert not sending email

[miclarsen1]

Hey

I have created a policy alert in Security & Compliance center. 

The policy is set to go off whenever files are shared externally. It is set for all users and status is enabled. 

However there are no email being send to anyone, no matter how many files I share with external users. 

So I am wondering, if there is something I have forgotten to turn on somewhere?

Any suggestions?

-Michael

I am aware some delay should be expected, but I am counting several days at this point, so I am thinking there is something wrong somewhere else.

[#2]

Can you see the actual events being generated in the audit log? If so, either try to recreate the alert, or open a support case and report this as issue.

[#3]

Hi@Vasil Michev ,

The audit log can find the sharing events yes. 

The audit log search can't however search for external item shares, so I can only find these events when searching for shares in general.

The policy alert however, is set with the condition ExternalFileSharing acticity, so maybe that just don't work, even though it should.