Configuring audit log retention policies
With audit retention policies in Microsoft Purview, you can specify how long to retain your audit logs within your organization. This is a Premium feature and requires the E5 license. If your organization does not have access to a Premium subscription, then audit logs will be retained for 90 days. With the advanced features of audit log retention policies, however, you can retain your audit logs for a period of up to 10 years. You can audit log policies based on the following:
- All activities within Microsoft 365 services
- Specified activities within Microsoft 365 services
- A priority level that specifies the policy that takes precedence; this is applicable only if you have multiple policies in your organization
To create an audit log retention policy, you need the Organization Configuration role in the Microsoft Purview compliance portal. You can create up to 50 such policies in your organization.
To create an audit log...