Microsoft Purview: Audit Search Graph API (Preview)

Microsoft Graph offers a unified API endpoint that enables access to data from multiple Microsoft cloud services using a single response. To enhance this feature, a new Audit Log Query API has been created that allows customers to create applications capable of programmatically querying and retrieving their organization's Audit activity logs. The new Audit Log Query Graph API will be made available beginning October 2023 and admin users with permission to search the Audit log will be able to access the logs through this new API. To access this API, it will be necessary to register your application with Microsoft Graph and add the relevant Graph permissions. Microsoft Purview Audit allows customers to analyze cloud log data generated across their enterprise, enabling them to respond effectively to security events, forensic investigations, internal investigations, and compliance obligations. The unified Microsoft Purview Audit logs retain a record of thousands of user and admin operations performed across dozens of Microsoft 365 services and solutions.

For more information on Microsoft Purview Audit and access to search the Audit log, register your application with Microsoft Graph. This news of the Audit Search Graph API preview was originally published on M365 Admin.