You can export, configure and view audit logs in Microsoft 365 admin center using the Security and Compliance Center portal. The file can be downloaded in CSV format. The audit data are stored as JSON objects which must be processed further to extract meaningful information. This process can be quite tedious and time-consuming. M365 Manager Plus can however simplify this process and provide insightful reports containing vital audit information in a click of a button. The tool also lets you create and configure your own audit profiles to monitor and track user actions that you prefer.
M365 Manager Plus and audit log records
M365 Manager Plus is a comprehensive Microsoft 365 reporting, managing, monitoring, auditing, and alerting tool. This tool offers certain auditing hacks that come handy and also help you track every user action in your Microsoft 365 organization. Following are the simple steps that guide you on how to generate, view and export audit log records using M365 Manager Plus.
To generate and view audit data
- Go to the Audit tab.
- Navigate to the Microsoft 365 service and the particular report you want.
- Audit data is generated for the last 30 days, by default. You can alter the timeline using the Period option and Business Hours drop-down.
- Choose the domains for which you would like to generate the report.
Once the report gets generated, you can
View filtered data:
- Click on the Filter icon above the generated report.
- Enter the desired condition based on which data must be filtered.
- Add more than one filters if you want to using the "+" icon.
- Click on Filter.
View summarized data:
- Click Create New View option in the top-right corner of the report.
- Give a name for the custom view.
- From the Summary Based On drop-down, select a suitable attribute.
- Click on Create.
View summarized data that is filtered:
Once you have filtered the data from a report of your choice, click Create New View and select the desired attribute under Summary Based On and click on Create.
To export audit reports
To know more about how to configure and create audit profiles, click here.
Why M365 Manager Plus?
Geolocation enabled audit reports: With these reports, you can look for changes performed by users along with their location. You can filter these reports location-wise and make management easy for regional admins.
Custom views and advanced filtering options: You can create audit reports with the type of view you prefer (like summarised views) and also choose the columns that must go into the report.
Business hours auditing: You can audit actions throughout the day and also get a separate set of report on the action performed within and outside the usual business hours. This will help you track the unusual activities performed outside business hours (if any) easily.
User-based and group-based auditing: With the advance filter options, you can filter the audits domain-wise and also pick out reports related to specific user or group in particular if would choose to.
Indefinite audit log storage: M365 Manager Plus allows you to store the audit logs for an indefinite period unlike in native tool with specific restrictions for storage period as per your subscription type.
Inpidual audit profiles for each activity: The main advantage of using this tool is that you can audit actions for most of the Microsoft 365 services and yet have distinct and comprehensive reports that track each activity accurately.
Create your own custom alerts: Using this feature, you can create your own alert profiles that help you get instant email notifications about the important changes made to your Microsoft 365 accounts.
Click here to learn more about how M365 Manager Plus helps you audit and manage Microsoft 365 accounts easily and efficiently.
