How to create FileVersionsAllDeleted FileSyncDownloadedFull FileSyncDownloadedPartial FileDeletedFirstStageRecycleBin FileDeletedSecondStageRecycleBin events on SharePoint

Question

I'm using Office 365 Management API to process any of the SharePoint created Audit events and I'm unable to create the below events

• FileVersionsAllDeleted
• FileSyncDownloadedFull
• FileSyncDownloadedPartial
• FileDeletedFirstStageRecycleBin
• FileDeletedSecondStageRecycleBin

Can you please advice on what steps to do on a SharePoint site for the files to create these audit events

Answer 1

Hi @Vish Pothaganti ,

FileSyncDownloadedFull: User establishes a sync relationship and successfully downloads files for the first time to their computer from a document library.

FileSyncDownloadedPartial: User successfully downloads any changes to files from a document library. This activity indicates that any changes that were made to files in the document library were downloaded to the user's computer. Only changes were downloaded because the document library was previously downloaded by the user (as indicated by the Downloaded files to computer activity).

FileVersionsAllDeleted: User deleted all File Versions.

FileDeletedFirstStageRecycleBin: User deletes a file from the recycle bin of a site.

FileDeletedSecondStageRecycleBin: User deletes a file from the second-stage recycle bin of a site.

Reference:

Search the audit log in the compliance center

Thanks
Best Regards

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @ VishPothaganti-6173,

Sorry for late response.

I tetsed like this:

Delete all file versions, then in Microsoft 365 compliance Aduit, it actually show as "FileVersionsAllDeleted":

2. FileDeletedFirstStageRecycleBin is "Deleted file from recycle bin":
   
3. FileDeletedSecondStageRecycleBin is "Deleted file from second-stage recycle bin":
4. FileSyncDownloadedFull is syncing to OneDrive for business and you can open the OneDrive Client Application, right click the file and select "Always keep on this device":