Whenever I try to audit using Purview, I get no results

Question

I was hoping I can get assistance as to purview audits.

I was trying to run an audit on my own account and other accounts and I am getting no results even though I know I should be getting results.

Any chance anyone can help me find out what's going wrong ?

I am willing to send screenshots for proof.

Answer 1

I'm going to share what I understood when I had the same problem.

The Audit function of Microsoft Purview searches only activities executed by admins or other users delegated to the searched mailbox.
Activities runned by the owner aren't searched by this tool.

The only workaround found was using PowerShell:

New-MailboxAuditLogSearch -StartDate "YYYY-MM-DD" -EndDate "YYYY-MM-DD" -Mailboxes list-of-mailboxes -StatusMailRecipients email-address-of-who-needs-audit -LogonTypes Owner -Name "Custom audit name"

The biggest problem with this PowerShell command is that the result may arrive after days with an error message, without any data.
The Get-AuditSearchLog doesn't show the progress and this is disappointing.

I never found a valid solution to this.

PS: I have E5 + EMS E3

Answer 2

I wanted to update this ticket.

I am working with Andi from Microsoft, I added a Microsoft E5 license and we're getting the same results.

I worked with her for a week already and still no specific progress.

She will be contacting her next level and we're going to take it from there.

Updates will follow.

Answer 3

This is a bit much.

Like does Microsoft expect non technical people to go through with this ?

How is it so difficult to accomplish such simple things?

Microsoft if you're monitoring this, this situation is disappointing.

Answer 4

OK, I just spoke to Kenn from Microsoft in the Philippines and we came to the conclusion that the suggestion from a previous Microsoft rep to add the E3 Mobility + Security addon license was provided incorrectly.

After the conversation, he suggested activating the Purview 90 day trial.

When I tried to do so, I get the below:

Obstacles in every corner, it seems.

Any suggestions ?