Loading Microsoft 365 Message Center...
Loading Microsoft 365 Message Center...
Updated May 14, 2025: After further review we have decided not to proceed with this change at this time. We will communicate via Message center when we are ready to proceed. We apologize for any inconvenience.
In Microsoft Purview, audit search provides your organization with access to critical audit log event data, allowing you to gain insight and further investigate user activities. The Microsoft Purview Compliance portal’s audit search UI currently includes several search fields (i.e., date range, activities, workloads, users, etc.) to facilitate the retrieval of relevant logs. With a recent update, we have added four additional fields to the audit search UI.
These four fields are described below:
| New filter field | Description |
|---|---|
| Id | Unique identifier of an audit record. |
| UserType | The type of user that performed the operation. See the UserType table for details on the types of users. |
| UserKey | Azure Active Directory Object ID in GUID format. |
| ClientIP | The IP address of the device that was used when the activity was logged. |
This message is associated with Microsoft 365 Roadmap ID 384092.