Advanced filters for Admin audit logs

Use Advanced Filters to query Admin audit logs.

For example, the image below shows how to refine your query to activities initiated by Nestor.

See all available filters in sapio365 Admin audit logs

*For a list of activities and categories, refer to Microsoft Entra audit log categories and activities.

Activity*

Application Display Name - Initiated by

Application ID - Initiated by

Category*

Correlation ID

Date (UTC)

GUID

Operation type

Result Status

Service

Target Display Name

Target ID

Target Type

Target Username

User Display Name - Initiated by

User ID - Initiated by

Username - Initiated by