How do I export an audit log?
The first step is to search the audit log and then export the results in a comma-separated value (CSV) file to your local computer.
- Run an audit log search and revise the search criteria if necessary until you have the desired results.
- Click Export results and select Download all results.
Where can I find audit logs in Office 365?
Review your audit log Sign in to the Security & Compliance Center with your Microsoft 365 Admin account. Select Search & Investigation, and then select Audit log search. Select the activities you want to audit. For example, mailbox activities such as one or more users signing into their mailbox or purging email.
How long does Office 365 keep logs?
You can retain audit logs for up to 10 years. You can create policies based on the following criteria: All activities in one or more Microsoft 365 services. Specific activities (in a Microsoft 365 service) performed by all users or by specific users.
How do I export mailbox audit logs?
Export the mailbox audit log
- In the EAC, go to Compliance Management > Auditing.
- Click Export mailbox audit logs.
- Configure the following search criteria for exporting the entries from the mailbox audit log: Start and end dates: Select the date range for the entries to include in the exported file.
- Click Export.
Where can I find the SharePoint Online audit log?
SharePoint Online does not have a dedicated audit log search. That is why, if you want to find SharePoint-related events, you need to make use of the unified audit log. Audit log search is accessed from the Office 365 Security & Compliance Center.
How to export Microsoft 365 audit log records?
Use PowerShell to search and export audit log records Instead of using the audit log search tool in the Security & Compliance Center, you can use the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell to export the results of an audit log search to a CSV file.
Where to find the audit log in Microsoft Office?
In the left pane of the Security & Compliance Center, click Search, and then click Audit log search. The Audit log search page is displayed.
How to search the audit log in Microsoft 365 compliance?
To open a private browsing session in Google Chrome (called an incognito window), press CTRL+SHIFT+N. Sign in using your work or school account. In the left pane of the Security & Compliance Center, click Search, and then click Audit log search. The Audit log search page is displayed. Note.