Audit Log Lags?

[Andrew Warland]

What is the lag time for the Security and Compliance centre Audit Logs?

To give an idea of the lag we've noticed, a user did some things on Wednesday morning our time. The logs did not show the activity on Thursday at 6 PM and only showed this on Friday morning (they may have appeared overnight but I wasn't watching then).

Is there any way to know if the audit logs are lagging?

[#2 · Accepted solution]

Depends on the time of event and whether the service decided to perform as advertised on that day :)

There's a table here: https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-...

But you will often find that the SLAs are not met, in some cases it might even be days before the events appear.