Microsoft Purview | Audit: Enable audit log search for content searches that target Microsoft SharePoint Online
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
What the notice says
Microsoft’s text, safely structuredBy default, searches conducted from various Microsoft 365 entry points into Microsoft SharePoint Online are not collected in the Microsoft Purview audit log search. You may enable these searches to be collected by following these instructions: Step 4: Enable SearchQueryInitiated events in Get started with auditing solutions | Microsoft Learn.
When this will happen
General Availability (Worldwide, GCC, GCC High, DoD): Available now.
How this will affect your organization
To capture searches initiated by users against SharePoint online, you must enable SearchQueryInitiatedSharePoint for each user.
What you need to do to prepare
This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.
What changed
Between archive captures, newest firstThe archive supplies one version of this notice.
Learn more
Links from the notice and their documentation checks- Step 4: Enable SearchQueryInitiated eventsNot read yet
- Get started with auditing solutions | Microsoft LearnNot read yet
Related public changes
No related announcements were found in the saved public history. Check the source for newer announcements.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
- 1 linked page has not been read yet.