Skip to main content
All CollectionsProtectAuditActivity
Understand your Activity log report
Understand your Activity log report
Updated over a week ago

The following article gives some explanation on the content you may see in your Activity log report.

Index

How to export the Activity log report

  1. Select Activity, then choose between your tenant's Teams, Team sites, or Communication sites.

  2. Apply one or more filters to drill down into the activity log as desired.

  3. When complete, click Export to export your Activity log as a CSV file.

Considerations

  • Your activity log displays up to 5000 activities performed since your first connection. Apply filters to view a specific set of activities from your history.

  • The Activity log report contains information from the Activity page based on the filters you applied. When you open the file, all columns are visible, though the values may be blank depending on your selected filters.

  • Use a naming structure that indicates how you filtered your export. For example, if you filtered for owners who added sensitivity tags to teams during the date range January 1st to 31st, name the file Team_sensitivity_added_210101_210131.CSV.

  • The Activity log report shows all owner and admin actions as well as automated actions, including those that result from your policies. The UserFullName value of all automated actions is System.

Columns

Report column

Description

EventDate

The date and time the activity occurred (in UTC). From the Activity page, you can apply a filter to specify the date range.

EventType

The type of activity that occurred. From the Activity page, you can apply a filter to specify the activity type(s) you want to export in your report.

GroupId

The ID of the Microsoft 365 group. Each Microsoft Team is associated with a Microsoft 365 group. For more information, see What is the relationship between Microsoft Teams, Microsoft 365 Groups, and Microsoft services?

GroupDisplayName

The display name of the team or group.

UserId

The user ID of the owner or admin who performed the activity.

UserFullName

The name of the owner, admin, or system that performed the activity.

TeamsAssociated

Shows whether the Microsoft 365 group is associated with a Microsoft Team, where TRUE is associated and FALSE is not associated.

Policy

The ShareGate policy associated with the EventType. For example, sensitivity and purpose or the Inactivity detection policy.

CategorizeType

Shows if the categorization applied was for sensitivity or for purpose.

ItemDisplayName

Expands on information for the EventType column. For example, when a sensitivity tag is applied you will see the tag chosen; when an external link is deleted using ShareGate Protect you will see the link name; and so on.

OldItemDisplayName

When a feature or setting is changed, this column shows what it was changed from. The column ItemDisplayName shows what the feature or setting was changed to.

IsReminder

Shows if a notification was sent for the first time (FALSE) or as a reminder (TRUE).

GroupCount

Shows the number of teams and groups reviewed for external sharing and/or guest access.

ImpactedtUserId

The ID of the owner, member, or guest who had their membership changed.

ImpactedUserName

The name of the owner, member, or guest who had their membership changed. For example, a member may be added or a guest removed.

ContentDestination

When a team or group is archived, you can copy a file or folder to a user's OneDrive for Business. This column shows the OneDrive destination.

ContentType

Shows whether the content from the ContentTitle column was a file or folder.

ContentTitle

Shows the name of the content that was archived, downloaded from archival, or copied to OneDrive from archival.

ItemId

This column will not be populated.

Did this answer your question?