Audit on folder

Question

We have a large doc lib and we are trying to do a Purview audit on one of the folders (to see who accessed/edited files in that folder). But we are getting no results,

Answer 1

Actually I found the problem and the solution to this.

Apparently, when you input the folder name you cannot do it using the link with lots of numbers etc. eg:

https://......./sites/HAtest/Shared%20Documents/Forms/AllItems.aspx?id=%2Fsites%2FHAtest%2FShared%20Documents%2F

It does not like numbers, symbols and %20. What you have to do is to construct the link using plain site/folder names (replace any %20 with spaces). eg:

https://......./sites/HAtest/Shared Documents/folder1/subfolder

Answer 2

Dear Hanif888

Good day!

As I am the forum moderator, I do not have access to the data on the server side, so it is difficult for me to help you investigate this issue.

This is why I recommend that you contact Microsoft Support, who can assist you in investigating the background data to see why the audit log is not being displayed.

Thanks for your cooperation.

Have a good day!

Sincerely,

Tin | Microsoft Community Moderator

Answer 3

Actually its a weird problem.

If I input a search term in the 'Keyword Search' field and fill in dates it does return some results.

However, if I fill in 'File, folder, or site' field with a link to a folder then it does not find anything. I have tried different sites/folders but to no avail.

Answer 4

Dear Hanif888,

Good day! Thank you for posting to Microsoft Community. I am happy to help you

I noticed that you want to search for audit reports for a specific folder in the SharePoint document library.

I would like to confirm that you have followed the steps in the following document to view the audit report:

Search the audit log | Microsoft Learn

If you went through the steps in the documentation and searched for audit logs, nothing came up. It is possible that there is a problem on the server side, resulting in incomplete audit data. In this situation, I am sorry and recommend you to connect with the related development team where they can check the internal sources and investigate the issue further.

So, I request you to connect with your IT admin of your organization (How do I find my Microsoft 365 admin? - Microsoft Support) and ask them to raise a new service request from the Microsoft 365 admin center so that the related development team will connect with you and investigate the issue further.

Reference: Get support - Microsoft 365 admin | Microsoft Learn

Note: I apologize for redirecting you to related development support team because the moderators in this community are limited with the resource for further investigation and to get a quick resolution to your problem, I requested it.

Thanks for your cooperation.

Sincerely,

Tin | Microsoft Community Moderator