Good Day
We understand that the legacy site collection audit reports is gradually phasing out, with some reports still available to site collection administrators (they do not have access to the Search and Compliance Center). When we go to the audit log reports of a classic team site in SharePoint Online we see the various options and picked a custom report choosing several events and a weeks time frame. Have two questions I am hoping in getting advice:
- When looking at the excel output for the account that opened or edit a document for example all we see is the system account and no end user accounts seem to be showing as we normally see with on premise sites. Is this an expected outcome were user identities are not longer available when in SharePoint Online?
- How far back can we go as we pick the date range is it perhaps 90 days?
Thanks!
