SharePoint Server auditing: do the auto-generated Excel reports mirror the data in the SQL AuditData table?

Question

I have a question about auditing in SharePoint Server 2016 (and higher):

Do the AuditTable table in the content databases in SQL and the auto-generated Excel reports contain the same data?

Or put another way: I am trying to understand if I will lose any information if I enable audit log trimming and just keep the automatically generated (Excel) reports? (I have examined the AuditTable and I think it looks like the Excel reports contain exactly the same data, but I am not sure...)

Thanks for any input!

Answer 1

The output is formatted slightly differently than the AuditData table, but the content is identical. Note that querying the AuditData table directly is not supported.

Answer 2

Hi @Green Arrow
About audit log trimming, the default setting for retaining audit log data is zero days, that means if you don't specify a different retention period, all audit log entries are deleted at the end of the month (in the content databases in SQL). In addtion, we can also specify the document library to save audit log reports to before the audit log data is trimmed. Set this option if you need access to audit log data, using audit log reports, after the audit log has been trimmed:

For better understanding, you could refer to these two simialr case:
https://learn.microsoft.com/en-us/answers/questions/363002/sharepoint-2019-onprem-site-collection-audit-setti.html
https://learn.microsoft.com/en-us/answers/questions/261975/sharepoint-audit-log-trimming.html?page=1&pageSize=10&sort=oldest

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.