Events not arriving for Office 365 Onedrive or Sharepoint
Problem
Events do not appear in the Cloud Activity - API report after connecting an Office 365 Onedrive or Sharepoint account via the API Integrations section of CASB.
Solution
Ensure that the Unified Audit Logs option is enabled within Office 365.
- Visit https://protection.office.com as an Office 365 admin
- Click Search
- Click Audit log search
- If it’s not enabled you’ll see a link to Turn on Auditing. Click it to enable the Unified Audit Log
- Generate some file activity, such as uploading a document and check the activity report again. It may take several minutes for the events to arrive.