cipp_list_audit_logs
Retrieve audit log entries for Microsoft 365 tenants. Filter by log type, date range, or target specific tenants.
Instructions
List audit log entries for a tenant
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | Number of days to look back when retrieving log entries. Defaults to 7 when omitted. | |
| type | No | Filter results to a specific log type (e.g. "AzureActiveDirectory", "Exchange", "SharePoint"). | |
| tenantFilter | Yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |