Audit Events - Event Availability Timing Reference

Modified on Thu, 31 Mar 2022 at 05:57 AM

I. Overview

CoreView's audit reporting is a powerful solution that allows our customers to easily and quickly monitor or report on key events in their Office 365 ecosystem.  The availability of audit event data is controlled by Microsoft.  Therefore, this knowledge resource is designed to provide you with reference so you will know what events are available when.


When an audited activity is performed by a user or admin in Office 365, an audit record is generated and stored in the Office 365 audit log for your organization. CoreView offers our customers one year of Audit data retention period. Still, please note that the length of time that an audit record is retained depends also on your Office 365 or Microsoft 365 enterprise subscription, and specifically the type of the license that is assigned to a specific user.


II. Event Availability

It can take up to 30 minutes or up to 24 hours after an event occurs for the corresponding audit log record to be returned in the results of an audit log search. The following table shows the time it takes for the different services in Office 365. 



Note: The reference table provided herein is based on information available from Microsoft as of the date this resource was published or last updated: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide


Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us how can we improve this article!

Select atleast one of the reasons

Feedback sent

We apprciate your effort and will try to fix the article