Search the audit log Audit search in Microsoft Purview. A search is a job that runs in the background, in UTC, up to 10 at a time. We find who deleted a file, and an inbox rule created from an unknown IP address, open the details of each record, look at more useful searches, and export and preserve the results. W AUDIT AND LOGGING Search the audit log Ada Admin Eli Employee HOW AUDIT SEARCH WORKS A search is a job, not a page Narrow searches finish in minutes. Broad ones can take hours. Microsoft Purview Related solutions eDiscoveryData SecurityInvestigations Search Searches completed2 Active searches0 Active unfiltered searches0 Search Clear all Search nameJob statusProgressTotal resultsCreation time ← Search 1 result Export Date (UTC)IP addressUserRecord typeActivityItem Details The full audit record, as JSON MORE QUESTIONS, MORE SEARCHES The question decides the filter QUESTIONSEARCH FOR EXPORT AND PRESERVE Results you can stand behind ACTIVITY EXPLORER OR AUDIT? Two views of the same log ACTIVITY EXPLORERAUDIT SEARCH Good to know 1/7 AUDIT AND LOGGING Search the audit log Audit search finds the records behind the question. We find who deleted a file and an inbox rule created from an unknown IP address, open the full record, and export what matters. informasjonsbeskyttelse.no