you have to enable the audit log. So, a global administrator or user assigned permissions role audit log must first turn on audit logging before you can start searching the Office 365 audit log. To turn it on, just click start recording user and admin activity on the audit log search page in the compliance center. After you turn it on, a message is displayed that says the audit log is being prepared and that you can run a search in a couple of hours after preparation is complete. And you can see an example of this message here at the bottom of the screen. Now, let�s look at the audited activities. You can see we audit just about every piece of data we have, whether that�s SharePoint, OneDrive for Business, Teams,