question

JoshADM-0149 avatar image
0 Votes"
JoshADM-0149 asked KyleXu-MSFT commented

Better way to build reporting on the Audit Log data?

Hi,

I'm trying to pull records from users using sendAS to send mail from a shared mailbox.

I don't see this as an option from the Microsoft Graph API so I've been using the Office 365 Management API.

With this API, I need to:
Setup a subscription for the data
make an API request to pull a list of contentUris
loop through those contentUris to pull the actual data
sort through the data to find what I want

This data expires every 7 days so I need to pull it weekly and store the data somewhere.

Is there some other way to pull this information? I was able to get what I needed from PowerShell, but was asked to try Flows.

It just seems overly tedious and complicated for something you can easily get across any date range from the GUI version of the audit log.


office-exchange-online-itproazure-ad-audit-logs
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

michev avatar image
0 Votes"
michev answered

For specific events, you're better off using PowerShell and the Search-UnifiedAuditLog cmdlet. Not sure how Flow will help in any way, either with PowerShell or the management APIs.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleXu-MSFT avatar image
0 Votes"
KyleXu-MSFT answered KyleXu-MSFT commented

@JoshADM-0149

If you enable mailbox audit log in your organization, you will could find log from mailbox audit log: Mailbox actions for user mailboxes and shared mailboxes


84728-qa-kyle-15-31-10.png


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@JoshADM-0149

I am writing here to confirm with you any update about this thread now?
If the above suggestion helps, please be free to mark it as an answer for helping more people.

0 Votes 0 ·