How to get audit log report of personal OneDrive ?

Hi Nebu Thomas Mathew,

Thank you for doing further tests and sharing the result with us.

We understand your concern is that there are many activities being done in user's OneDrive for business, but when you try to get audit report of OneDrive for business, the report only shows Viewed pages activity.

When testing in 3 different Microsoft 365 tenants, we found we can reproduce the same situation. If we directly put a user's OneDrive for business URL in the File, folder, or site box, the result only shows Viewed pages activity.

We tried to specify the activity(for example, Download file) and OneDrive URL, set the time range, then search log. No data is available.

And we also tried to specify user's name and OneDrive URL, it only shows Viewed pages activity.

Given this, we do understand the issue has affected your work. Very sorry for the inconvenience caused.

We're afraid this issue may need to be investigated from back end. The best way to further troubleshoot it is to report it to the related team. We would love to help you further, sorry to say that due to limited resource, we cannot fix the issue directly.

In this situation, we sincerely recommend you try to create a support ticket from Microsoft 365 Admin Center>Support>New Service Request. The support team over there has higher permission than us to investigate the issue from background, they have more resource and correct escalation channel in handling this kind of issues. This would be a more efficient way in handling the case for you.

For reference:  Get support | Microsoft Docs    

Thanks for your patience and understanding so far.

Sincerely,

Tina Chen | Microsoft Community Moderator

Hello Nebu Thomas Mathew,

We appreciate you spent time doing test and share these detailed information with us.

It looks like you want to get audit report of a user's OneDrive for business.

When we tested from our side, we tried a user's OneDrive for business link as following:

https://***-my.sharepoint.com/personal/**_m365x***_onmicrosoft_com/_layouts/15/onedrive.aspx

And we can get report.

However, if we tried to remove _layouts/15/onedrive.aspx from the end of the URL, it shows No data available.

We suggest you may try to add _layouts/15/onedrive.aspx to the end of the user's OneDrive for business link, then see if it will show data.

Please do let us know if it works for you.

If you still cannot get a user's OneDrive for business audit report, very sorry for the inconvenience caused. We'd like to confirm that does the issue happen to a specific user's OneDrive or different users' OneDrive?

If you try a different user, does it work?

Thanks for your patience and understanding!

Best Regards,

Tina

Hello Nebu Thomas Mathew,

Good day to you. Thanks for querying in this forum.

Do you want to get audit log report for a user's OneDrive for business?

If yes, according to this article Search the audit log in the Microsoft Purview compliance portal - Microsoft Purview (compliance) | Microsoft Docs OneDrive for business is supported for auditing.

Audited activities for OneDrive for business can be:

File and page activities, Folder activities, Synchronization activities and so on.

For more audited activities and other detailed information, you may refer to Audited activities part in the article Search the audit log in the Microsoft Purview compliance portal - Microsoft Purview (compliance) | Microsoft Docs

If you want to search a specific user's audit log, you can specify the user's name in the Users box.

Or do you want to get audit log report for a user's personal OneDrive*(consumer OneDrive, the OneDrive is usually associated with a personal Microsoft account)*?

If yes, we're sorry to convey that audit log feature is not available for personal OneDrive. Sorry for the inconvenience.

Hope above information can help you!

If our understanding of your question is not consistent with yours, feel free to point it out.

Thanks for your patience and understanding. Hope you are keeping safe and well!

Best Regards,

Tina

Hello Nebu Thomas Mathew,

May I know if you received the reply? Can you get audit log report of a user's OneDrive for business? Do you still need help?

Feel free to post back and share any update with us, we will continue trying best to help.

Best Regards,

Tina

Hi,

I think I am referring to user's OneDrive for business.

Suppose I am a part of company "abcd", then my OneDrive link will be as below https://abcdcom-my.sharepoint.com/personal/nebu_mathew_abcd_com/

But the problem is when I put the link in below input, I get output as "No data available"

Do you know what can be the reason ?

Regards,

Nebu Thomas Mathew