Dec 01 2020
10:23 AM
- last edited on
Feb 19 2021
05:10 AM
by
TechCommunityAP
Dec 01 2020
10:23 AM
- last edited on
Feb 19 2021
05:10 AM
by
TechCommunityAP
Hi everyone,
i am confused - i want to search a certain Team for user actions. This should be a normal task to complete. But neither the guid nor the Team name nor the MailNickname will get me the results.
What am i doing wrong here?
All docs/videos/blogs i find - filter on the Teams actions from a certain user. Also a valid use case - but the (i think normal one) use case would be - to filter on a Teams.
Can anyone help me out?
Thanks in advance
Dec 03 2020 10:54 AM
@StephanGee Hi, happy to help.
What tool do you use, and what are you looking for? Can you provide some context?
Dec 03 2020 11:30 AM
For example my boss says: "In our team was a channel deleted/other teams setting changed in the last month - can you find out who did that and when?"
Normally i would expect that i can search:
In this Team
Last month
This action
But at the moment i only can search
Last month
This action
I use the Audit Tool from the M365 compliance center.
Dec 07 2020 02:38 AM
Solution@StephanGee ah, I see. That's not possible with the Audit tool. You can use either MCAS (see screenshot) for that or Log Analytics, using KQL.
Dec 07 2020 02:38 AM
Solution@StephanGee ah, I see. That's not possible with the Audit tool. You can use either MCAS (see screenshot) for that or Log Analytics, using KQL.