2

My organisation has a requirement that audit / security logs need to be kept for at least one year. In office 365 the logs available in the Audit Log Search are only kept for 90 days.

I am trying to find the simplest possible solution where we can download the logs to be stored locally. Ideally a product we can buy before we have to custom develop something.

I have looked at using the Search-UnifiedAuditLog powershell command but this does count as custom dev and I would also need to split the JSON return into individual columns.

The ideal end result would be a simple CSV file containing the days worth of results.

Has anyone seen anything like this available?

Improve this question
1

You can download a CSV Audit log search file directly from Office 365 :

  1. Go to Admin Center then Click on Security and Compliance like image below:

enter image description here

  1. Then select Audit Log Search and search by Date then you can Save or Export your Results in CSV file :

enter image description here

Improve this answer
  • 1
    The problem with this approach is that it is manually and needs someone to select the correct filters and date range each time. I would like to automate that. – Buzzby Jan 26 '18 at 15:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.