Enabling Audit log on Purview Portal will cause additional charge

Hi @Kyi Soe Thin

Thank you for posting your question in the Microsoft Q&A forum.     

Regarding your issue, Audit (Standard) is included at no extra cost with Microsoft 365 Business Basic. This means: 

• You can access audit logs directly from the Microsoft Purview portal. 
• Audit records are retained for 180 days. 
• You can search logs for activities across Microsoft 365 services like Exchange, SharePoint, OneDrive, and Entra ID. 

For more details, please refer to: Learn about auditing solutions in Microsoft Purview

For extended features like Audit (Premium), which offer longer retention and advanced auditing capabilities, additional licensing (e.g., Microsoft 365 E5 or add-ons) may be required. Without such licenses, you can still enable and use the audit log on the Purview portal without extra charges, but with standard audit retention and features. 

For more details, please refer to: Microsoft Purview service description

Because Auditing is not activated by default for Business Basic, so you must manually turn it on. 

Here is how you can enable Audit Logs on Purview Portal 

• Sign in to the Microsoft Purview compliance portal via purview.microsoft.com (you have to be Global Admin, Compliance Admin, etc. to do this) 
• Go to the Solutions section and select Audit. 
•  
• If auditing is not enabled, you’ll see a banner prompting you to "Start recording user and admin activity." Select it to enable audit logging. 
• 
• It may take several hours before you start seeing audit data. 

For more details, please refer to: Turn auditing on or off

Learn about the Microsoft Purview portal 

Hope it clears things up for you and if you need any assistance feel free to comment below. 

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.