Purview Audit

[Simcfc73]

Hi,

I'm getting zero results when I run an Audit search on my tenant, regardless of the search criteria.

The Copilot troubleshooting steps asked me to check permissions, which were correct. it asked me to run several PowerShell commands, but they returned nothing useful. Eventually, it told me to log a support case with Microsoft.

I may be missing something obvious, but I would have expected that running an Audit search with no filters selected would return at least some results.

eDiscovery searches work fine; the issue only affects Audit searches.

Copilot suggested that auditing may not be enabled or configured correctly for my tenant.

Has anyone come across this before, or is there anything obvious I should check before raising a support case?

 

[NetworkDirector]

1 hour ago, Simcfc73 said:

 

Hi,

I'm getting zero results when I run an Audit search on my tenant, regardless of the search criteria.

The Copilot troubleshooting steps asked me to check permissions, which were correct. it asked me to run several PowerShell commands, but they returned nothing useful. Eventually, it told me to log a support case with Microsoft.

I may be missing something obvious, but I would have expected that running an Audit search with no filters selected would return at least some results.

eDiscovery searches work fine; the issue only affects Audit searches.

Copilot suggested that auditing may not be enabled or configured correctly for my tenant.

Has anyone come across this before, or is there anything obvious I should check before raising a support case?

 

I've also found audits on Purview to be a nightmare, they never seem to work properly, sometimes it's results, most of the time none. I had to open a support ticket too but they told me to do things that I had already done on my own. 

[Simcfc73]

As if by magic, it started working after back-and-forth with Microsoft support. Not sure if they did anything.