Categories

I. Overview

CoreView's audit reporting is a powerful solution that allows our customers to easily and quickly monitor or report on key events in their Office 365 ecosystem.  The availability of audit event data is controlled by Microsoft.  Therefore, this knowledge resource is designed to provide you with reference so you will know what events are available when.


When an audited activity is performed by a user or admin in Office 365, an audit record is generated and stored in the Office 365 audit log for your organization. CoreView offers our customers one year of Audit data retention period. Still, please note that the length of time that an audit record is retained depends also on your Office 365 or Microsoft 365 enterprise subscription, and specifically the type of the license that is assigned to a specific user.


II. Event Availability

It can take up to 30 minutes or up to 24 hours after an event occurs for the corresponding audit log record to be returned in the results of an audit log search. The following table shows the time it takes for the different services in Office 365. 



Note: The reference table provided herein is based on information available from Microsoft as of the date this resource was published or last updated: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide