ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 12:40 UTC Customize Public modeDiscuss ChangeIntel on Discord
MC789312 Stay informedUpdated messageNew featureAdmin impact

Microsoft Purview | Audit search: New filters will be available

Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
Microsoft 365 suiteMicrosoft Purview
Microsoft 365 admin center

Rollout

Roadmap
384092

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

Schedule dates changed in the text

Date phrases in schedule sentences differ between the versions this installation saw
  • Seen 14 May 2025 early April 2025, late April 2025, early May 2025, late May 2025
  • Seen 23 Jan 2025 mid-February 2025, early March 2025, mid-March 2025 → late April 2025, early May 2025, late May 2025
  • Seen 21 Nov 2024 early November 2024, mid-November 2024, late November 2024 → mid-February 2025, early March 2025, mid-March 2025, early April 2025
  • Seen 5 Sep 2024 early December 2024, mid-December 2024 → late November 2024
  • Seen 4 Sep 2024 mid-August 2024, mid-September 2024, mid-October 2024 → early November 2024, early December 2024, mid-November 2024, mid-December 2024
  • Seen 10 Jul 2024 early July 2024, late July 2024, late August 2024 → mid-August 2024, mid-September 2024, mid-October 2024
  • Seen 13 Jun 2024 late May 2024, mid-June 2024, late June 2024 → early July 2024, late July 2024, late August 2024

Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.

What the notice says

Microsoft’s text, with source markup removed
Updated May 14, 2025: After further review we have decided not to proceed with this change at this time. We will communicate via Message center when we are ready to proceed. We apologize for any inconvenience. In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter field Description Id Unique identifier of an audit record. UserType The type of user that performed the operation. See the UserType table for details on the types of users. UserKey Azure Active Directory Object ID in GUID format. ClientIP The IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. When this will happen: Public Preview: We will communicate via Message center when we are ready to proceed. General Availability (Worldwide): We will communicate via Message center when we are ready to proceed. How this will affect your organization: Security admins in your organization who use audit in the Microsoft Purview compliance portal will be able to use these four additional fields to retrieve relevant audit logs. What you need to do to prepare: This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your users about this change and update any relevant documentation as appropriate. Additional resources Search the audit log | Microsoft Learn

What changed

Between archive captures, newest first

  1. Updated January 21,May 14, 2025: After further review we have decided not to proceed with this change at this time. We have updated the rollout timeline below. Thank youwill communicate via Message center when we are ready to proceed. We apologize for your patience.any inconvenience. In Microsoft Purview, audit search provides your organization with access to critical … 365 Roadmap ID 384092. When this will happen: Public Preview: We will begin rolling out early April 2025 (previously early February) and expect communicate via Message center when we are ready to complete by late April 2025 (previously early March). proceed. General Availability (Worldwide): We will begin rolling out early May 2025 (previously mid-March) and expect communicate via Message center when we are ready to complete by late May 2025 (previously early April).proceed. How this will affect your organization: Security admins in your organization who …

    • Services Microsoft 365 suite → Microsoft 365 suite, Microsoft Purview
    • Services Microsoft 365 suite, Microsoft Purview → Microsoft 365 suite

    Updated NovemberJanuary 21, 2024:2025: We have updated the rollout timeline below. Thank you for your patience. … 384092. When this will happen: Public Preview: We will begin rolling out mid-Februaryearly April 2025 (previously early November)February) and expect to complete by early Marchlate April 2025 (previously mid-November).early March). General Availability (Worldwide): We will begin rolling out mid-Marchearly May 2025 (previously mid-November)mid-March) and expect to complete by early Aprillate May 2025 (previously late November).early April). How this will affect your organization: Security admins in your organization who …

  4. Updated September 4,November 21, 2024: We have updated the rollout timeline below. Thank you for your … 384092. When this will happen: Public Preview: We will begin rolling out early November 2024 (previously mid-August)mid-February 2025 (previously early November) and expect to complete by mid-November 2024early March 2025 (previously mid-September).mid-November). General Availability (Worldwide): We will begin rolling out mid-November 2024mid-March 2025 (previously mid-September)mid-November) and expect to complete by late November 2024early April 2025 (previously mid-October).late November). How this will affect your organization: Security admins in your organization who …

  5. Only details this page does not show changed.

  6. … rolling out early November 2024 (previously mid-August) and expect to complete by early December mid-November 2024 (previously mid-September). General Availability (Worldwide): We will begin rolling out mid-November 2024 (previously mid-September) and expect to complete by mid-Decemberlate November 2024 (previously mid-October). How this will affect your organization: Security admins in …

  7. Updated July 10,September 4, 2024: We have updated the rollout timeline below. Thank you for your … 384092. When this will happen: Public Preview: We will begin rolling out mid-Augustearly November 2024 (previously early July) mid-August) and expect to complete by mid-Septemberearly December 2024 (previously late July). mid-September). General Availability (Worldwide): We will begin rolling out mid-Septembermid-November 2024 (previously late July) mid-September) and expect to complete by mid-Octobermid-December 2024 (previously late August).mid-October). How this will affect your organization: Security admins in your organization who …

  8. Updated June 13,July 10, 2024: We have updated the rollout timeline below. Thank you for your … 384092. When this will happen: Public Preview: We will begin rolling out early July mid-August 2024 (previously late May)early July) and expect to complete by late July mid-September 2024 (previously mid-June).late July). General Availability (Worldwide): We will begin rolling out late July mid-September 2024 (previously mid-June)late July) and expect to complete by late August mid-October 2024 (previously late June).August). How this will affect your organization: Security admins in your organization who …

    • Services Microsoft 365 suite → Microsoft 365 suite, Microsoft Purview
    • Tags New feature, Admin impact → Updated message, New feature, Admin impact

    Updated June 13, 2024: We have updated the rollout timeline below. Thank you for your patience. In Microsoft Purview, audit search provides your organization with access to critical … 384092. When this will happen: Public Preview: We will begin rolling out late Mayearly July 2024 (previously late May) and expect to complete by mid-June 2024.late July 2024 (previously mid-June). General Availability (Worldwide): We will begin rolling out mid-Junelate July 2024 (previously mid-June) and expect to complete by late June 2024.August 2024 (previously late June). How this will affect your organization: Security admins in your organization who …

  10. · first version seen

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 12:40 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.