Forum Discussion
SharePoint Online Audit Logging Report Capture Alternatives
Any assistance would be greatly apprecaited on the following:
Current State - The business has over a hundred site collections on SharePoint 2010 and retains audit logs for 7 years! Directly querying the database to retreive audit log information.
Future State - Transitioning to SharePoint Online and the alternatives appear to be as follows:
1. Trim and retain for 90 days only per the standard offering from SharePoint Online
2. Trim and retain in a dedicated audit log site collection (event capture will be restricted by the size of the site collection e.g. 1 TB)
3. Develop and implement an API to capture audit logs per the 7 year requirement.
Steer from Compliance is to now keep logs for no longer than 6 months. Can anyone recommend an approach to take including pros and cons?
Thanks
1 Reply
I would recommend focusing on the audit log features that provided in the Security and Compliance Center. This is where MS is investing their resources and will be the platform for providing this type of functionality going forward.
This article should help you understand the options, https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US
