You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/reports-monitoring/concept-audit-logs.md
+15-8Lines changed: 15 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,7 @@ This article gives you an overview of the audit report.
42
42
43
43
## Audit logs
44
44
45
-
The Azure AD audit logs provide records of system activities for compliance. To access the audit report, select **Audit logs** in the **Activity** section of **Azure Active Directory**. Note that audit logs may have a latency of up to an hour, so it may take that long for audit activity data to show up in the portal after you have completed the task.
45
+
The Azure AD audit logs provide records of system activities for compliance. To access the audit report, select **Audit logs** in the **Monitoring** section of **Azure Active Directory**. Note that audit logs may have a latency of up to an hour, so it may take that long for audit activity data to show up in the portal after you have completed the task.
46
46
47
47
48
48
@@ -87,16 +87,20 @@ You can filter the audit data on the following fields:
87
87
The **Service** filter allows you to select from a drop-down list of the following services:
88
88
89
89
- All
90
+
- AAD Management UX
90
91
- Access Reviews
91
-
- Account Provisioning
92
-
- Application SSO
92
+
- Account Provisioning
93
+
- Application Proxy
93
94
- Authentication Methods
94
95
- B2C
95
96
- Conditional Access
96
97
- Core Directory
97
98
- Entitlement Management
99
+
- Hybrid Authentication
98
100
- Identity Protection
99
101
- Invited Users
102
+
- MIM Service
103
+
- MyApps
100
104
- PIM
101
105
- Self-service Group Management
102
106
- Self-service Password Management
@@ -115,7 +119,11 @@ The **Category** filter enables you to select one of the following filters:
115
119
- DirectoryManagement
116
120
- EntitlementManagement
117
121
- GroupManagement
122
+
- KerberosDomain
123
+
- KeyManagement
124
+
- Label
118
125
- Other
126
+
- PermissionGrantPolicy
119
127
- Policy
120
128
- ResourceManagement
121
129
- RoleManagement
@@ -131,14 +139,13 @@ The **Status** filter allows you to filter based on the status of an audit opera
131
139
- Success
132
140
- Failure
133
141
134
-
The **Target** filter allows you to search for a particular target by name or user principal name (UPN). The target name and UPN are case-sensitive.
142
+
The **Target** filter allows you to search for a particular target by the starting of the name or user principal name (UPN). The target name and UPN are case-sensitive.
135
143
136
-
The **Initiated by** filter enables you to define an actor's name or a universal principal name (UPN). The name and UPN are case-sensitive.
144
+
The **Initiated by** filter enables you to define what an actor's name or a universal principal name (UPN) starts with. The name and UPN are case-sensitive.
137
145
138
146
The **Date range** filter enables to you to define a timeframe for the returned data.
139
147
Possible values are:
140
148
141
-
- 1 month
142
149
- 7 days
143
150
- 24 hours
144
151
- Custom
@@ -176,11 +183,11 @@ With user and group-based audit reports, you can get answers to questions such a
176
183
177
184
- What licenses have been assigned to a group or a user?
178
185
179
-
If you want to review only auditing data that is related to users, you can find a filtered view under **Audit logs** in the **Activity** section of the **Users** tab. This entry point has **UserManagement** as preselected category.
186
+
If you want to review only auditing data that is related to users, you can find a filtered view under **Audit logs** in the **Monitoring** section of the **Users** tab. This entry point has **UserManagement** as preselected category.
If you want to review only auditing data that is related to groups, you can find a filtered view under **Audit logs** in the **Activity** section of the **Groups** tab. This entry point has **GroupManagement** as preselected category.
190
+
If you want to review only auditing data that is related to groups, you can find a filtered view under **Audit logs** in the **Monitoring** section of the **Groups** tab. This entry point has **GroupManagement** as preselected category.
0 commit comments