How to Export Office 365 Audit Logs

How to Export Office 365 Audit Logs

In this tutorial I will show you how to export security audit logs from your Office 365 Tenant. Before you can export audit logs from Office 365 you must enable audit logging in Office 365 Security & Compliance Center.

  1. Login to the Security & Compliance Center at https://protection.office.com
  2. Expand Security & investigation on the left menu and choose Audit Log search
  3. Chose a Start & End date and click Search
    Note: You can further filter the log results by Activity such as Password Changed…, etc

  4. After the query runs click Export results | Download all results

  5. A csv export of the audit log will be presented for download

 

Thanks for following along! Leave a comment below if you have anything to add. I hope this tutorial for Office 365 Admins has helped you out, you may also be interested in my article…

How to create Alert Policies in Office 365 


One Reply to “How to Export Office 365 Audit Logs”

  1. I’ve downloaded a report for 2 months, IE a separate report for each. both are just over 60MB in size and both show exactly 50000 entries – that makes me think there’s some sort of limit on reporting / export as I can’t see how both months would have exactly the same number of events.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.