check before: 2024-08-01
Product:
Entra, Microsoft 365 suite, Purview Communication Compliance
Platform:
Web, World tenant
Status:
In development
Change type:
Admin impact, New feature, Updated message
Links:
Details:
Summary:
Microsoft has decided not to proceed with the new audit search filters in Microsoft Purview at this time. The update included four new fields: Id, UserType, UserKey, and ClientIP. They will communicate further via the Message center when ready to proceed. No admin action is required.
Details:
Updated May 14, 2025: After further review we have decided not to proceed with this change at this time. We will communicate via Message center when we are ready to proceed. We apologize for any inconvenience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI.
These four fields are described below:
New filter fieldDescription
IdUnique identifier of an audit record.
UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users.
UserKeyAzure Active Directory Object ID in GUID format.
ClientIPThe IP address of the device that was used when the activity was logged.
This message is associated with Microsoft 365 Roadmap ID 384092.
[When this will happen:]
Public Preview: We will communicate via Message center when we are ready to proceed.
General Availability (Worldwide): We will communicate via Message center when we are ready to proceed.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2024-05-01
updated:
2025-05-15
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft has paused the update to Microsoft Purview's audit search feature, which was intended to introduce new filters for more detailed event tracking, and will notify users when they plan to proceed with the changes.
Direct effects for Operations**
Audit Log Accessibility
The absence of new filters may hinder security admins' ability to efficiently retrieve specific audit logs, potentially delaying investigations into user activities.
- roles: Security Admins, Compliance Officers
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
User Activity Monitoring
Without the new filters, monitoring user activities may become less effective, leading to potential security risks and compliance issues.
- roles: Security Admins, IT Managers
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
Documentation and User Communication
Failure to prepare users for the change may result in confusion regarding the audit search capabilities, impacting their ability to utilize the compliance portal effectively.
- roles: End Users, Compliance Officers
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Audit Trail Analysis
The introduction of new filters in the audit search will allow for more granular analysis of user activities, enhancing the ability to track and investigate security incidents effectively. This will improve the overall security posture of the organization.
- next-steps: Leverage the new filters to create detailed reports on user activities and identify patterns that may indicate security risks. Train security admins on utilizing these new fields effectively.
- roles: Security Admins, Compliance Officers, IT Managers
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
Improved Compliance Reporting
With the ability to filter by UserType and ClientIP, compliance reporting can be more accurate and relevant, allowing for better adherence to regulatory requirements and internal policies.
- next-steps: Develop compliance reports that utilize the new filters to ensure all user activities are accounted for in audits. Regularly review these reports to ensure compliance standards are met.
- roles: Compliance Officers, Legal Teams, IT Auditors
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
Streamlined Incident Response
The additional fields will facilitate quicker identification of suspicious activities, allowing for a more efficient incident response process. This can lead to reduced response times and better management of security incidents.
- next-steps: Integrate the new audit search capabilities into the incident response workflow, ensuring that security teams are trained to use these features for rapid investigation of incidents.
- roles: Security Analysts, Incident Response Teams, IT Managers
- references: https://learn.microsoft.com/purview/audit-search?view=o365-worldwide&tabs=microsoft-purview-portal, https://www.microsoft.com/en-us/microsoft-365/roadmap?rtc=1%26filters=&searchterms=384092
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-05-15 | MC Last Updated | 01/23/2025 23:48:35 | 2025-05-14T21:19:36Z |
| 2025-05-15 | MC Messages | Updated January 21, 2025: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early April 2025 (previously early February) and expect to complete by late April 2025 (previously early March). General Availability (Worldwide): We will begin rolling out early May 2025 (previously mid-March) and expect to complete by late May 2025 (previously early April). | Updated May 14, 2025: After further review we have decided not to proceed with this change at this time. We will communicate via Message center when we are ready to proceed. We apologize for any inconvenience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will communicate via Message center when we are ready to proceed. General Availability (Worldwide): We will communicate via Message center when we are ready to proceed. |
| 2025-05-15 | MC End Time | 07/07/2025 09:00:00 | 2025-12-31T08:00:00Z |
| 2025-05-15 | MC Summary | Microsoft Purview's audit search will have four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview in April 2025 and General Availability in May 2025. No action is required before the rollout. | Microsoft has decided not to proceed with the new audit search filters in Microsoft Purview at this time. The update included four new fields: Id, UserType, UserKey, and ClientIP. They will communicate further via the Message center when ready to proceed. No admin action is required. |
| 2025-01-24 | MC Last Updated | 11/21/2024 19:53:54 | 2025-01-23T23:48:35Z |
| 2025-01-24 | MC Messages | Updated November 21, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out mid-February 2025 (previously early November) and expect to complete by early March 2025 (previously mid-November). General Availability (Worldwide): We will begin rolling out mid-March 2025 (previously mid-November) and expect to complete by early April 2025 (previously late November). | Updated January 21, 2025: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early April 2025 (previously early February) and expect to complete by late April 2025 (previously early March). General Availability (Worldwide): We will begin rolling out early May 2025 (previously mid-March) and expect to complete by late May 2025 (previously early April). |
| 2025-01-24 | MC End Time | 05/19/2025 09:00:00 | 2025-07-07T09:00:00Z |
| 2025-01-24 | MC Summary | The message details an update to Microsoft Purview's audit search with four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting mid-February 2025 and General Availability early April 2025. No admin action is required for the rollout. | Microsoft Purview's audit search will have four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview in April 2025 and General Availability in May 2025. No action is required before the rollout. |
| 2024-11-22 | MC Last Updated | 09/06/2024 01:00:10 | 2024-11-21T19:53:54Z |
| 2024-11-22 | MC Messages | Updated September 4, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early November 2024 (previously mid-August) and expect to complete by mid-November 2024 (previously mid-September). General Availability (Worldwide): We will begin rolling out mid-November 2024 (previously mid-September) and expect to complete by late November 2024 (previously mid-October). | Updated November 21, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out mid-February 2025 (previously early November) and expect to complete by early March 2025 (previously mid-November). General Availability (Worldwide): We will begin rolling out mid-March 2025 (previously mid-November) and expect to complete by early April 2025 (previously late November). |
| 2024-11-22 | MC End Time | 01/27/2025 08:00:00 | 2025-05-19T09:00:00Z |
| 2024-11-22 | MC Summary | The message details an update to Microsoft Purview's audit search with four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting early November 2024 and General Availability mid-November 2024. No admin action is required for the rollout. | The message details an update to Microsoft Purview's audit search with four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting mid-February 2025 and General Availability early April 2025. No admin action is required for the rollout. |
| 2024-09-06 | MC Messages | Updated September 4, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early November 2024 (previously mid-August) and expect to complete by early December 2024 (previously mid-September). General Availability (Worldwide): We will begin rolling out mid-November 2024 (previously mid-September) and expect to complete by mid-December 2024 (previously mid-October). | Updated September 4, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early November 2024 (previously mid-August) and expect to complete by mid-November 2024 (previously mid-September). General Availability (Worldwide): We will begin rolling out mid-November 2024 (previously mid-September) and expect to complete by late November 2024 (previously mid-October). |
| 2024-09-06 | MC Last Updated | 09/04/2024 23:56:37 | 2024-09-06T01:00:10Z |
| 2024-09-06 | MC Summary | Microsoft Purview's audit search will have four new filter fields: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting early November 2024 and General Availability mid-November 2024. No admin action is required before the rollout. | The message details an update to Microsoft Purview's audit search with four new filters: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting early November 2024 and General Availability mid-November 2024. No admin action is required for the rollout. |
| 2024-09-05 | MC Last Updated | 07/10/2024 16:00:12 | 2024-09-04T23:56:37Z |
| 2024-09-05 | MC Messages | Updated July 10, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out mid-August 2024 (previously early July) and expect to complete by mid-September 2024 (previously late July). General Availability (Worldwide): We will begin rolling out mid-September 2024 (previously late July) and expect to complete by mid-October 2024 (previously late August). | Updated September 4, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal's audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early November 2024 (previously mid-August) and expect to complete by early December 2024 (previously mid-September). General Availability (Worldwide): We will begin rolling out mid-November 2024 (previously mid-September) and expect to complete by mid-December 2024 (previously mid-October). |
| 2024-09-05 | MC End Time | 11/18/2024 08:00:00 | 2025-01-27T08:00:00Z |
| 2024-09-05 | MC Summary | Microsoft Purview's audit search is adding four new filters: Id, UserType, UserKey, and ClientIP. These will help organizations better investigate user activities. The update is part of Microsoft 365 Roadmap ID 384092, with a Public Preview in mid-August 2024 and full rollout by mid-October 2024. No admin action is required before the rollout. | Microsoft Purview's audit search will have four new filter fields: Id, UserType, UserKey, and ClientIP. The rollout timeline has been updated, with Public Preview starting early November 2024 and General Availability mid-November 2024. No admin action is required before the rollout. |
| 2024-07-11 | MC Last Updated | 06/14/2024 00:08:50 | 2024-07-10T16:00:12Z |
| 2024-07-11 | MC Messages | Updated June 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early July 2024 (previously late May) and expect to complete by late July 2024 (previously mid-June). General Availability (Worldwide): We will begin rolling out late July 2024 (previously mid-June) and expect to complete by late August 2024 (previously late June). | Updated July 10, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out mid-August 2024 (previously early July) and expect to complete by mid-September 2024 (previously late July). General Availability (Worldwide): We will begin rolling out mid-September 2024 (previously late July) and expect to complete by mid-October 2024 (previously late August). |
| 2024-07-11 | MC End Time | 09/30/2024 09:00:00 | 2024-11-18T08:00:00Z |
| 2024-07-11 | MC Summary | Microsoft Purview's audit search is adding four new filters: Id, UserType, UserKey, and ClientIP. These will help organizations better investigate user activities. The update is part of Microsoft 365 Roadmap ID 384092, with a Public Preview in early July 2024 and full rollout by late July 2024. No admin action is required before the rollout. | Microsoft Purview's audit search is adding four new filters: Id, UserType, UserKey, and ClientIP. These will help organizations better investigate user activities. The update is part of Microsoft 365 Roadmap ID 384092, with a Public Preview in mid-August 2024 and full rollout by mid-October 2024. No admin action is required before the rollout. |
| 2024-06-14 | MC MessageTagNames | New feature, Admin impact | Updated message, New feature, Admin impact |
| 2024-06-14 | MC Summary | Microsoft Purview's audit search is adding four new filters: Id, UserType, UserKey, and ClientIP. These will help organizations better investigate user activities. The update is part of Microsoft 365 Roadmap ID 384092, with a Public Preview in late May 2024 and full rollout by late June 2024. No admin action is required before the rollout. | Microsoft Purview's audit search is adding four new filters: Id, UserType, UserKey, and ClientIP. These will help organizations better investigate user activities. The update is part of Microsoft 365 Roadmap ID 384092, with a Public Preview in early July 2024 and full rollout by late July 2024. No admin action is required before the rollout. |
| 2024-06-14 | MC Last Updated | 05/01/2024 01:45:02 | 2024-06-14T00:08:50Z |
| 2024-06-14 | MC Messages | In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI.
These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out late May 2024 and expect to complete by mid-June 2024. General Availability (Worldwide): We will begin rolling out mid-June 2024 and expect to complete by late June 2024. | Updated June 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI. These four fields are described below: New filter fieldDescription IdUnique identifier of an audit record. UserTypeThe type of user that performed the operation. See the UserType table for details on the types of users. UserKeyAzure Active Directory Object ID in GUID format. ClientIPThe IP address of the device that was used when the activity was logged. This message is associated with Microsoft 365 Roadmap ID 384092. [When this will happen:] Public Preview: We will begin rolling out early July 2024 (previously late May) and expect to complete by late July 2024 (previously mid-June). General Availability (Worldwide): We will begin rolling out late July 2024 (previously mid-June) and expect to complete by late August 2024 (previously late June). |
| 2024-06-14 | MC Title | Microsoft Purview | Audit search: New filters will be available | (Updated) Microsoft Purview | Audit search: New filters will be available |
| 2024-06-14 | MC End Time | 08/05/2024 09:00:00 | 2024-09-30T09:00:00Z |
Last updated 1 month ago
