Is it possible to query Office 365 Enterprise Audit Logs programmatically using Microsoft Graph?

0
votes

Is there a way to query Office 365 Enterprise Audit Logs programmatically using Microsoft Graph / Client. It is possible to manually query them in O365 Security & Compliance Center Page. https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c

I am specifically interested in audit logs that contains file uploaded to OneDrive, or file opened /modified events from users within the tenant.

1
office365microsoft-graph-apionedrive

1 Answers

1
votes

Check Office 365 Management Activity API

The Office 365 Management Activity API aggregates actions and events into tenant-specific content blobs, which are classified by the type and source of the content they contain. Currently, these content types are supported:

Audit.AzureActiveDirectory

Audit.Exchange

Audit.SharePoint

Audit.General (includes all other workloads not included in the previous content types)

DLP.All (DLP events only for all workloads)