The following article gives some explanation on the content you may see in your Activity log report.
Index
How to export the Activity log report
Select Activity, then choose between your tenant's Teams, Team sites, or Communication sites.
Apply one or more filters to drill down into the activity log as desired.
When complete, click Export to export your Activity log as a CSV file.
Considerations
Your activity log displays up to 5000 activities performed since your first connection. Apply filters to view a specific set of activities from your history.
The Activity log report contains information from the Activity page based on the filters you applied. When you open the file, all columns are visible, though the values may be blank depending on your selected filters.
Use a naming structure that indicates how you filtered your export. For example, if you filtered for owners who added sensitivity tags to teams during the date range January 1st to 31st, name the file Team_sensitivity_added_210101_210131.CSV.
The Activity log report shows all owner and admin actions as well as automated actions, including those that result from your policies. The UserFullName value of all automated actions is System.
Columns
Report column | Description |
EventDate | The date and time the activity occurred (in UTC). From the Activity page, you can apply a filter to specify the date range. |
EventType | The type of activity that occurred. From the Activity page, you can apply a filter to specify the activity type(s) you want to export in your report. |
GroupId | The ID of the Microsoft 365 group. Each Microsoft Team is associated with a Microsoft 365 group. For more information, see What is the relationship between Microsoft Teams, Microsoft 365 Groups, and Microsoft services? |
GroupDisplayName | The display name of the team or group. |
UserId | The user ID of the owner or admin who performed the activity. |
UserFullName | The name of the owner, admin, or system that performed the activity. |
TeamsAssociated | Shows whether the Microsoft 365 group is associated with a Microsoft Team, where TRUE is associated and FALSE is not associated. |
Policy | The ShareGate policy associated with the EventType. For example, sensitivity and purpose or the Inactivity detection policy. |
CategorizeType | Shows if the categorization applied was for sensitivity or for purpose. |
ItemDisplayName | Expands on information for the EventType column. For example, when a sensitivity tag is applied you will see the tag chosen; when an external link is deleted using ShareGate Protect you will see the link name; and so on. |
OldItemDisplayName | When a feature or setting is changed, this column shows what it was changed from. The column ItemDisplayName shows what the feature or setting was changed to. |
IsReminder | Shows if a notification was sent for the first time (FALSE) or as a reminder (TRUE). |
GroupCount | Shows the number of teams and groups reviewed for external sharing and/or guest access. |
ImpactedtUserId | The ID of the owner, member, or guest who had their membership changed. |
ImpactedUserName | The name of the owner, member, or guest who had their membership changed. For example, a member may be added or a guest removed. |
ContentDestination | When a team or group is archived, you can copy a file or folder to a user's OneDrive for Business. This column shows the OneDrive destination. |
ContentType | Shows whether the content from the ContentTitle column was a file or folder. |
ContentTitle | Shows the name of the content that was archived, downloaded from archival, or copied to OneDrive from archival. |
ItemId | This column will not be populated. |