Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Audit log report

Copper Contributor

We have created hold for SharePoint sites and OneDrive of all users. When searching for audit logs getting below results. Can any one knows what exactly this activity means?

 

SPLog.PNGODLog.PNG

 

 

1 Reply

It means that someone (an SC admin) accessed a file inside the preservation hold library, nothing more. There's a detailed description of events and their corresponding properties in the documentation, if you want to dissect all the individual fields.