Skip to main content Link Menu Expand (external link) Document Search Copy Copied
Copilot for M365

Task 1.5: Enable auditing

Auditing can take an hour to become active. This is being enabled now so that later labs will be able to leverage the auditing capability of Microsoft Purview.

Audit logging is turned on by default for Microsoft 365 organizations. However, when setting up a new Microsoft 365 organization, you should verify the auditing status for your organization.

  1. Sign into the Microsoft Purview portal at https://purview.microsoft.com.

  2. If prompted, in the Welcome to the new Microsoft Purview portal dialog box, select the I agree to the terms of data flow disclosure, and Privacy Statements checkbox, and then select Try now.

  3. Select the Audit solution card.
    If the Audit solution card isn’t displayed, select View all solutions and then select Audit from the Core section.

  4. If auditing isn’t turned on for your organization, a banner is displayed prompting you start recording user and admin activity.
    Select the Start recording user and admin activity banner.

  5. Visit **[Search the audit log Microsoft Learn](https://learn.microsoft.com/en-us/purview/audit-search?redirectSourcePath=%252fen-US%252farticle%252fSearch-the-audit-log-in-the-Office-365-Protection-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c&tabs=microsoft-purview-portal)** to learn how to verify that audit log search is turned on.