Sep 07 2016 05:32 AM
Sep 07 2016 05:32 AM
Hey,
we are in environment with a huge amount of site collections (+100K) and for compliance issues, we need to collect all audit log data to report on user activities accross the environment. Given that querying the content database is not supported on premise and not possible in an Online scenario, I was wondering what other possibilies do exist / if anything is coming through PnP / CSOM?
Kind regards,
Christophe
Sep 14 2016 03:18 AM
Sep 14 2016 03:18 AM
@Vesa Juvonen, is this something that might get into PnP / any other tracks to explore? Thanks for any guidance!
Sep 14 2016 09:02 AM
@Deleted, have you looked at the audit log reports built into Office 365?
In the Admin application, go to Admin Centers and open the Compliance admin center. In the Compliance (aka Security & Compliance) center, expand "Search & investigation" in the left navigation, and click on "Audit log search". You can also read more about the Audit log search at https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US
Do you neede to keep the audit log data for more than 90 days?
Sep 14 2016 02:31 PM
Sep 14 2016 11:07 PM
Thanks for your responses. The Security & Compliance center is only giving part of the functionality, as it is only covering SPO.
To clarify a bit more on the needs: we have the requirement to be able to report on who's viewed / downloaded / deleted content in a full on-prem environment which might move in the future partly to SPO (so a hybrid environment). These logs should be consultable for a longer period of time (+ 5 years). We are able to capture that data if we are reading directly from the content databases, but this is not advisable and even impossible on SPO.
Sep 15 2016 12:44 AM
Sep 15 2016 11:54 AM
My understanding is that the Audit Log data for SharePoint Online is available for 90 days. If you need to keep it around longer, you will need to write somethnig to harvest and store it. Look at https://msdn.microsoft.com/office-365/office-365-management-activity-api-reference for API details.
Sep 15 2016 11:57 AM
Also, if you are attending Microsoft Ignite 2016, there are 300 plus vendors in the Expo Hall. Some of them might have solutions for more comprehensive audit logging for on premise SharePoint.
Sep 21 2016 10:21 AM