Share via

Unified Audit Logs search retention and duration?

EnterpriseArchitect 6,041 Reputation points
2023-08-28T14:14:27.7433333+00:00

How long can I search for the Unified Audit log in my current Azure tenancy?

I am using Azure AD Premium P2, so I wonder how far back can I go back when searching from:

https://compliance.microsoft.com/auditlogsearch?viewid=Async%20Search

Thank you for considering my question.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
Microsoft Security | Microsoft Purview
0 comments
Accepted answer
  1. Carlos Solís Salazar 18,196 Reputation points MVP Volunteer Moderator
    2023-08-28T16:50:41.4733333+00:00

    You can have a retention period of 1 year or 90 days, depending on the licenses for each user (no licenses for the administrators), specifically:

    • For users assigned an Office 365 E5 or Microsoft 365 E5 license (or users with a Microsoft 365 E5 Compliance or Microsoft 365 E5 eDiscovery and Audit add-on license), audit records for Azure Active Directory, Exchange, and SharePoint activity are retained for one year by default.
    • For users assigned any other (non-E5) Office 365 or Microsoft 365 license, audit records are retained for 90 days.

    Azure AD Premium P2 won't give you any additional features.

    You can have more information here https://learn.microsoft.com/en-us/purview/audit-log-search

    Hope this helps.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.