Usage
m365 purview auditlog list
Description
List audit logs within your tenant
Options
| Option |
Description |
--contentType <contentType> |
Content type logs to retrieve. Valid values: AzureActiveDirectory, Exchange, SharePoint, General, DLP. |
--startTime [startTime] |
Start time of logs to be retrieved. This should be defined as a valid ISO 8601 string. 2021-12-16T18:28:48.6964197Z. Start time cannot be more than 7 days in the past. Default value is 24h ago. |
--endTime [endTime] |
End time of logs to be retrieved. End time cannot be in the future. This should be defined as a valid ISO 8601 string. 2021-12-16T18:28:48.6964197Z. Default value is now. |
Examples
List all SharePoint logs of the past 24 hours
m365 purview auditlog list --contentType SharePoint
List all SharePoint logs within a specifc time frame
m365 purview auditlog list --contentType SharePoint --startTime 2022-01-01T00:00:00Z --endTime 2022-01-03T12:00:00Z
Default properties
creationTime, userId, operation, objectId
Additional Info
Info:
https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference
Usage
m365 purview auditlog list
Description
List audit logs within your tenant
Options
--contentType <contentType>AzureActiveDirectory,Exchange,SharePoint,General,DLP.--startTime [startTime]--endTime [endTime]Examples
List all SharePoint logs of the past 24 hours
List all SharePoint logs within a specifc time frame
Default properties
creationTime, userId, operation, objectId
Additional Info
Info:
https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference