Audit Events
The SharePoint Online Connector captures and logs various audit events related to file and folder operations, as well as site administration activities. This document outlines the different types of audit events that are recorded to support compliance, security, and governance needs.
Audit Events
File Events
- FileCheckOutDiscarded – A file checkout action was discarded.
- FileCheckedIn – A file was checked in.
- FileCheckedOut – A file was checked out.
- FileCopied – A file was copied to another location.
- FileDeleted – A file was deleted.
- FileModified – A file was modified.
- FileMoved – A file was moved to another location.
- FileRenamed – A file was renamed.
- FileRestored – A previously deleted file was restored.
- FileUploaded – A new file was uploaded.
- FileRecycled – A file was moved to the recycle bin.
- FileDeletedFirstStageRecycleBin – A file was deleted from the first-stage recycle bin.
- FileDeletedSecondStageRecycleBin – A file was deleted from the second-stage recycle bin.
Folder Events
- FolderCopied – A folder was copied to another location.
- FolderCreated – A new folder was created.
- FolderDeleted – A folder was deleted.
- FolderDeletedFirstStageRecycleBin – A folder was deleted from the first-stage recycle bin.
- FolderDeletedSecondStageRecycleBin – A folder was deleted from the second-stage recycle bin.
- FolderModified – A folder was modified.
- FolderMoved – A folder was moved to another location.
- FolderRenamed – A folder was renamed.
- FolderRestored – A previously deleted folder was restored.
- FolderRecycled – A folder was moved to the recycle bin.
Site Administration Events
- SiteCollectionCreated – A new SharePoint site collection was created.
- SiteCollectionAdminAdded – A new administrator was added to a site collection.
- SiteAdminChangeRequest – A request was made to change site administration settings.
Usage and Compliance Considerations
- These audit events help organizations track changes, detect unauthorized modifications, and ensure compliance with governance policies.
- Retaining audit logs for a suitable duration supports forensic analysis and security monitoring.
- Organizations should regularly review audit reports to identify any anomalies or suspicious activity.
For further details on audit event handling, refer to the SharePoint Online Connector documentation or contact support.