The Audit Log in Office 365 is disabled, by default, presumably to save disk space.

To enable the audit log in your tenant, in the Office 365 Admin Portal browse to the Security & Compliance Admin Center -> Search & investigation -> Audit log search. Click Start recording user and admin activities then click Turn On.

Or you can use this PowerShell command:

Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true

Source: TechNet

This entry was posted on August 2, 2017 at 3:48 pm. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

Posted in Office 365 by Doug Comments Off on Enable the Audit Log in Office 365