SOLVED

Audit Log / sharing files

%3CLINGO-SUB%20id%3D%22lingo-sub-971679%22%20slang%3D%22en-US%22%3EAudit%20Log%20%2F%20sharing%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-971679%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20testing%20sharing%20files%20with%20external%20users%20via%20a%20secure%20link%20not%20anonymous%20and%20the%20audit%20log%20does%20show%20when%20we%20share%20files%20but%20it%20never%20shows%20who%20you%20share%20it%20with%20in%20the%20logs.%26nbsp%3B%20Is%20there%26nbsp%3B%20way%20to%20show%20this%20or%20is%20this%20how%20its%20meant%20to%20be.%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EGary%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-971679%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-971708%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20%2F%20sharing%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-971708%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F437047%22%20target%3D%22_blank%22%3E%40GaryS123%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESharePoint%20External%20Sharing%20Reports%20are%20currently%20in%20the%20process%20of%20being%20rolled%20out%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-gb%2Fmicrosoft-365%2Froadmap%3Ffeatureid%3D27034%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-gb%2Fmicrosoft-365%2Froadmap%3Ffeatureid%3D27034%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESee%20article%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fsharing-reports%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fsharing-reports%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EFor%20items%20shared%20with%20a%20link%2C%20the%20report%20contains%20a%20row%20for%20each%20signed-in%20user%20who%20has%20used%20the%20link%20or%20has%20been%20sent%20the%20link%20through%20the%20sharing%20dialog%20box.%20Links%20emailed%20directly%20that%20haven't%20been%20clicked%2C%20and%20Anyone%20links%20are%20not%20included%20in%20the%20report.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-971740%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20%2F%20sharing%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-971740%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%26nbsp%3BGreat%20thanks%20for%20the%20info%20!%3C%2FP%3E%3CP%3EGary%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1000780%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20%2F%20sharing%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1000780%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F437047%22%20target%3D%22_blank%22%3E%40GaryS123%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20should%20be%20audit%20log%20events%20for%20external%20sharing%20as%20well.%20Depending%20on%20which%20link%20you%20are%20sharing%2C%20you%20should%20see%20something%20like%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAddedToSecureLink%20which%2C%20in%20the%20%22other%22%20category%20tells%20you%20who%20the%20recipient%20is.%20Hope%20that%20helps!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EStephen%20Rice%3C%2FP%3E%0A%3CP%3ESenior%20Program%20Manager%2C%20OneDrive%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1038862%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20%2F%20sharing%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1038862%22%20slang%3D%22en-US%22%3EThat%E2%80%99s%20a%20great%20piece%20of%20advice%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F181%22%20target%3D%22_blank%22%3E%40Stephen%20Rice%3C%2FA%3E%20-%20always%20forgot%20the%20log!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I'm testing sharing files with external users via a secure link not anonymous and the audit log does show when we share files but it never shows who you share it with in the logs.  Is there  way to show this or is this how its meant to be.

Thanks

Gary

4 Replies
Highlighted
Best Response confirmed by GaryS123 (Contributor)
Solution
Hi @GaryS123

SharePoint External Sharing Reports are currently in the process of being rolled out

https://www.microsoft.com/en-gb/microsoft-365/roadmap?featureid=27034

See article

https://docs.microsoft.com/en-us/sharepoint/sharing-reports

For items shared with a link, the report contains a row for each signed-in user who has used the link or has been sent the link through the sharing dialog box. Links emailed directly that haven't been clicked, and Anyone links are not included in the report.

Hope that answers your question!

Best, Chris
Highlighted

@Christopher Hoard Great thanks for the info !

Gary 

Highlighted

Hi @GaryS123,

 

There should be audit log events for external sharing as well. Depending on which link you are sharing, you should see something like:

 

AddedToSecureLink which, in the "other" category tells you who the recipient is. Hope that helps!

 

Stephen Rice

Senior Program Manager, OneDrive

Highlighted
That’s a great piece of advice @Stephen Rice - always forgot the log!

Best, Chris