Share via

Sharepoint Online Audit Log API - Missing Operations

Anonymous
2024-07-18T14:36:55+00:00

I am extracting data using SharePoint Online Audit Log subscription, using API endpoint like below:

https://manage.office.com/api/v1.0/\*\*\*\*\*\*\*/activity/feed/subscriptions/content?contentType=Audit.SharePoint&startTime=2024-07-17T00:00:00&endTime=2024-07-17T23:59:59

Everything seems to work and below is a list of some of the distinct Operations we get in the result:

AccessRequestApproved

AccessRequestCreated

AddedToGroup

ClientViewSignaled

CommentCreated

CommentsDisabled

CompanyLinkCreated

CompanyLinkUsed

FileAccessed

FileAccessedExtended

FileCheckedIn

FileCheckedOut

FileCheckOutDiscarded

FileCopied

FileDownloaded

FileModified

FileModifiedExtended

FileMoved

FilePreviewed

FileRecycled

FileRenamed

FileSyncDownloadedFull

FileSyncUploadedFull

FileUploaded

FileVersionRecycled

FileVersionsAllDeleted

FolderCreated

FolderDeleted

FolderModified

FolderMoved

FolderRecycled

FolderRenamed

GroupAdded

GroupRemoved

GroupUpdated

ListColumnCreated

ListColumnDeleted

ListColumnUpdated

ListContentTypeUpdated

ListCreated

ListDeleted

ListItemCreated

ListItemRecycled

ListItemUpdated

ListItemViewed

ListUpdated

ListViewCreated

ListViewed

ListViewUpdated

PagePrefetched

PageViewed

PageViewedExtended

RemovedFromGroup

SearchQueryPerformed

SharingInheritanceBroken

SharingInheritanceReset

SharingInvitationBlocked

SharingRevoked

SharingSet

SiteCollectionAdminAdded

SiteCollectionAdminRemoved

SiteContentTypeUpdated

WACTokenShared

What we are noticing is that we used to get an Operation called SearchQueryPerformed, but since May 1st we are not getting any data for that Operation, anyone knows anything about it.

Thanks,

Microsoft 365 and Office | SharePoint | For business | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

2 answers

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  2. Anonymous
    2024-07-18T17:41:21+00:00

    Hi Wajid,

    Thanks for posting in the community.

    We would love to help you with your query, however, since it is related to Microsoft Graph, and we have a specific channel Microsoft Q&A Community coping with questions about SharePoint Activity API schema, I recommend you post a new thread (click "Ask a question" and add the tags Microsoft Graph and SharePoint) there for expert help.

    Sorry that our category may have limited resources on checking on your concern further.

    Thanks for your understanding.

    George | Microsoft Community Moderator

    Was this answer helpful?

    0 comments No comments