Tuesday, February 27, 2024

UAL Logging Updates for Office 365

 New logging capabilities are coming for Office 365 customers.  Much of this was driven by our engagement with the US Government to help them obtaining more logs and telemetry data.  Specifically, 

  • Unified Audit Log (UAL) Ingestion Size has been expanded to increase the amount of data flowing to SIEMs.
  • Retention has been increased to 180 days.

There is additional important information in the announcement that you should be considering.

Reference - https://techcommunity.microsoft.com/t5/public-sector-blog/cisa-omb-oncd-and-microsoft-collaborate-on-new-logging-playbook/ba-p/4063661