Audit log retention

Timelines and exceptions · All guidance changes

Purview · Official Microsoft guidance

No content change seen yet. Watched since 8 Oct 23:29 UTC, last read today 00:28 UTC, next check 21 Oct 00:28 UTC.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of 8 Oct 23:29 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

1 recorded change

Microsoft's revision log on this page · 9 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Manage audit log retention policiesRequirement1 condition
Manage audit log retention policiesRequirement1 condition
for 180 daysDefault audit log retention policy in Audit (Premium)Milestone
AzureActiveDirectory
for 180 daysDefault audit log retention policy in Audit (Premium)MilestoneExceptionScope2 conditions
before October 17, 2023 · on or after October 17, 2023 · for 90 daysDefault audit log retention policy in Audit (Premium)Milestone
Before you create an audit log retention policyRequirement1 condition
Create an audit log retention policyRequirementScope5 conditions
Edit policies in the dashboardException3 conditions
New-UnifiedAuditLogRetentionPolicySet-UnifiedAuditLogRetentionPolicy
Edit policies in PowerShellScope
Set-UnifiedAuditLogRetentionPolicy

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

17 Oct 2023
Microsoft logged a date change Default audit log retention policy in Audit (Premium)Microsoft's change log

Observed history and review priority

Captured 8 Oct 23:29 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 2

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

13 Oct 00:24 UTC · 14 candidates
8 Oct 23:29 UTC · 12 candidates

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

13 Oct 00:24 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
8 Oct 23:29 UTC · shown above

What changed

First observed 18 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.