question

VishPothaganti-6173 avatar image
0 Votes"
VishPothaganti-6173 asked Jerryzy edited

How to create FileVersionsAllDeleted FileSyncDownloadedFull FileSyncDownloadedPartial FileDeletedFirstStageRecycleBin FileDeletedSecondStageRecycleBin events on SharePoint

I'm using Office 365 Management API to process any of the SharePoint created Audit events and I'm unable to create the below events

  • FileVersionsAllDeleted

  • FileSyncDownloadedFull

  • FileSyncDownloadedPartial

  • FileDeletedFirstStageRecycleBin

  • FileDeletedSecondStageRecycleBin

Can you please advice on what steps to do on a SharePoint site for the files to create these audit events




office-sharepoint-online
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jerryzy avatar image
0 Votes"
Jerryzy answered VishPothaganti-6173 commented

Hi @VishPothaganti-6173 ,

FileSyncDownloadedFull: User establishes a sync relationship and successfully downloads files for the first time to their computer from a document library.

FileSyncDownloadedPartial: User successfully downloads any changes to files from a document library. This activity indicates that any changes that were made to files in the document library were downloaded to the user's computer. Only changes were downloaded because the document library was previously downloaded by the user (as indicated by the Downloaded files to computer activity).

FileVersionsAllDeleted: User deleted all File Versions.

FileDeletedFirstStageRecycleBin: User deletes a file from the recycle bin of a site.

FileDeletedSecondStageRecycleBin: User deletes a file from the second-stage recycle bin of a site.

Reference:

Search the audit log in the compliance center

Thanks
Best Regards



If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FileVersionsAllDeleted: User deleted all File Versions. -- I deleted all the versions and still do not see this event. I see a FileVersionsAllRecycled event only.

FileDeletedFirstStageRecycleBin: User deletes a file from the recycle bin of a site. -- I deleted a file from site recycle bin and still do not see the event.

FileDeletedSecondStageRecycleBin: User deletes a file from the second-stage recycle bin of a site. -- I deleted the same file from secondary recycle bin and still do not see the event.


FileSyncDownloadedFull: Can you please provide the steps to establish sync to desktop for sharepoint files. I understand OneDrive sync but want to establish how to sync SharePoint files to a desktop folder

0 Votes 0 ·
Jerryzy avatar image
0 Votes"
Jerryzy answered Jerryzy edited

Hi @ VishPothaganti-6173,

Sorry for late response.

I tetsed like this:

Delete all file versions, then in Microsoft 365 compliance Aduit, it actually show as "FileVersionsAllDeleted":

91085-snipaste-2021-04-26-10-49-01.png


  1. FileDeletedFirstStageRecycleBin is "Deleted file from recycle bin":
    90970-snipaste-2021-04-26-10-51-50.png


  2. FileDeletedSecondStageRecycleBin is "Deleted file from second-stage recycle bin":

    91121-snipaste-2021-04-26-11-05-41.png

  3. FileSyncDownloadedFull is syncing to OneDrive for business and you can open the OneDrive Client Application, right click the file and select "Always keep on this device":

91181-snipaste-2021-04-26-13-48-47.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.