Microsoft Purview Audit: HighCompleteness parameter in Search-UnifiedAuditLog Audit cmdlet

Microsoft is making an update to the Search-UnifiedAuditLog cmdlet by introducing a new HighCompleteness parameter. This parameter prioritizes completeness over speed, providing a more comprehensive set of audit log records. However, it may result in slower performance in terms of how quickly the results are returned. The HighCompleteness parameter will be available for public preview in mid-March 2024 and for general availability in early April 2024. Existing usage will not be immediately impacted, and no admin action is required for the rollout. Users who want to use the new parameter can refer to a sample request provided in the link. The Search-UnifiedAuditLog cmdlet is used to retrieve audit logs from a specific date range or filtered results based on specified criteria.

There is a possibility of timeouts and missing some results in case of very large queries that aim to retrieve a large number of audit records. With the HighCompleteness parameter, the cmdlet is designed to provide a more exhaustive and comprehensive set of audit log records. The update will happen automatically by the specified date with no admin action required, but users may want to notify others about this change and update any relevant documentation as appropriate. For further information, users can refer to the provided link.

The post Microsoft Purview Audit: HighCompleteness parameter in Search-UnifiedAuditLog Audit cmdlet originally appeared on M365 Admin.