check before: 2024-04-26
Product:
Exchange, Microsoft 365 suite, Purview Communication Compliance
Platform:
Online, US Instances, Web, World tenant
Status:
Launched
Change type:
New feature, Admin impact
Links:
Details:
Summary:
The new HighCompleteness parameter in the Search-UnifiedAuditLog cmdlet for Microsoft Purview Audit will ensure more exhaustive audit log records, prioritizing completeness over retrieval speed. Rolling out in early May 2024, it requires no immediate action but may slow down results. Microsoft 365 Roadmap ID 388735.
Details:
In Microsoft Purview Audit, the Search-UnifiedAuditLog cmdlet in Microsoft Exchange Online PowerShell is used to retrieve Audit logs from a specific date range or filtered results based on specified criteria. Very large queries aimed at retrieving a large number of audit records are susceptible to timeouts and may miss some results. With this new feature, we are introducing the HighCompleteness parameter to the cmdlet.
Please note that using this parameter can result in results being returned more slowly.
This message is associated with Microsoft 365 Roadmap ID 388735.
[When this will happen:]
General Availability (Worldwide, GCC, GCC High, DOD): We will begin rolling out early May 2024 and expect to complete by late May 2024.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability
Created:
2024-04-12
updated:
2024-04-12
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
Direct effects for Operations**
- Impact on IT Operations and Services
- Slower retrieval of audit logs
- Increased time for IT operations to access necessary audit information for compliance and troubleshooting.
- Potential delays in incident response times due to slower log retrieval.
- Roles impacted: IT Operations Managers, Compliance Officers, Security Analysts.
- Changes in query performance
- Administrators may need to adjust their query strategies to accommodate the new HighCompleteness parameter, potentially leading to a learning curve.
- Increased resource consumption on servers due to longer-running queries, which may affect overall system performance.
- Roles impacted: IT Administrators, System Engineers, Database Administrators.
- Impact on IT Users
- User experience with audit log queries
- Users relying on audit logs for reporting or compliance may experience delays in receiving results, impacting their workflow and decision-making processes.
- Users may need to be educated on the new parameter and its implications, leading to potential confusion or frustration.
- Roles impacted: Compliance Teams, Business Analysts, End Users accessing audit logs.
- Dependency on other IT services
- The change may affect integrations with other services that rely on timely access to audit logs, such as security information and event management (SIEM) systems.
- Potential for increased load on related systems, which may lead to cascading performance issues if not monitored closely.
- Roles impacted: IT Service Managers, Application Support Teams, Security Operations Center (SOC) Analysts.
References:
- Microsoft Purview Audit documentation: [Search-UnifiedAuditLog (ExchangePowerShell)](https://learn.microsoft.com/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps)
- Microsoft 365 Roadmap: [Roadmap ID 388735](https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=388735)
** AI generated content. This information is not reliable.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 weeks ago
