SOLVED

Audit Log Lags?

Regular Contributor

What is the lag time for the Security and Compliance centre Audit Logs?

To give an idea of the lag we've noticed, a user did some things on Wednesday morning our time. The logs did not show the activity on Thursday at 6 PM and only showed this on Friday morning (they may have appeared overnight but I wasn't watching then).

Is there any way to know if the audit logs are lagging?

1 Reply
best response confirmed by Andrew Warland (Regular Contributor)
Solution

Depends on the time of event and whether the service decided to perform as advertised on that day :)

 

There's a table here: https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-...

 

But you will often find that the SLAs are not met, in some cases it might even be days before the events appear.