Enum RecordType

RecordType enumeration

Audit record types

public enum RecordType

Values

NameValueDescription
ExchangeAdmin1Events from the Exchange admin audit log.
ExchangeItem2Events from an Exchange mailbox audit log for actions that are performed on a single item, such as creating or receiving an email message.
ExchangeItemGroup3Events from an Exchange mailbox audit log for actions that can be performed on multiple items, such as moving or deleted one or more email messages.
SharePoint4SharePoint events.
SharePointFileOperation6SharePoint file operation events.
AzureActiveDirectory8Azure Active Directory events.
AzureActiveDirectoryAccountLogon9Azure Active Directory OrgId logon events (deprecating).
DataCenterSecurityCmdlet10Data Center security cmdlet events.
ComplianceDLPSharePoint11Data loss protection (DLP) events in SharePoint and OneDrive for Business.
Sway12Events from the Sway service and clients.
ComplianceDLPExchange13Data loss protection (DLP) events in Exchange, when configured via Unified DLP Policy. DLP events based on Exchange Transport Rules are not supported.
SharePointSharingOperation14SharePoint sharing events.
AzureActiveDirectoryStsLogon15Secure Token Service (STS) logon events in Azure Active Directory.
SecurityComplianceCenterEOPCmdlet18
PowerBIAudit20Power BI events.
CRM21Microsoft CRM events.
Yammer22Yammer events.
SkypeForBusinessCmdlets23Skype for Business events.
Discovery24
MicrosoftTeams25Events from Microsoft Teams.
MicrosoftTeamsAddOns26Events from Microsoft Teams Add-ons.
MicrosoftTeamsSettingsOperation27Settings changes from Microsoft Teams.
ThreatIntelligence28Phishing and malware events from Exchange Online Protection and Office 365 Advanced Threat Protection.
MicrosoftFlow30Microsoft Flow events.
MicrosoftStream32Microsoft Stream events.
Project35Microsoft Project events.
SharepointListOperation36Sharepoint List events.
SecurityComplianceAlerts40Security and compliance alert signals.
ThreatIntelligenceUrl41Safe links time-of-block and block override events from Office 365 Advanced Threat Protection.
ThreatIntelligenceAtpContent47Phishing and malware events for files in SharePoint, OneDrive for Business, and Microsoft Teams from Office 365 Advanced Threat Protection.

See Also