Microsoft Purview | Audit: Enable audit log search for content searches that target Microsoft SharePoint Online [MC920299]

Microsoft Purview | Audit: Enable audit log search for content searches that target Microsoft SharePoint Online [MC920299]

Message ID: MC920299

By default, searches conducted from various Microsoft 365 entry points into Microsoft SharePoint Online are not collected in the Microsoft Purview audit log search. You may enable these searches to be collected by following these instructions: Step 4: Enable SearchQueryInitiated events in Get started with auditing solutions | Microsoft Learn.

[When this will happen:]

General Availability (Worldwide, GCC, GCC High, DoD): Available now.

[How this will affect your organization:]

To capture searches initiated by users against SharePoint online, you must enable SearchQueryInitiatedSharePoint for each user.

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Source: Microsoft

Show 1 Comment

1 Comment

  1. Mike Rosoft

    The latest update from Microsoft is here to shake things up for admins and users alike! With the introduction of the ability to enable audit log search for content searches targeting Microsoft SharePoint Online, organizations are in for a treat.

    Admins, get ready to dive into the world of data tracking like never before. By enabling SearchQueryInitiated events, you can now capture searches initiated by users against SharePoint online. It’s like having a personal detective for your organization’s data, ensuring transparency and accountability.

    For users, this means a more secure and organized search experience. Your queries will now be logged, helping to track down information efficiently and securely. No more lost files or mysterious data disappearances!

    The impact of these changes is set to be significant. With this enhanced auditing capability, organizations can better monitor and manage their data, leading to improved compliance and security measures. It’s a win-win situation for everyone involved!

    So, buckle up, admins, and users! Embrace the change, stay informed, and make the most out of this exciting update. Let’s keep the conversation going – share your thoughts on how this update will impact your organization in the comments below!

Leave a Reply

Your email address will not be published. Required fields are marked *