Share via

Unable to turn on Audit search in Purview

kyczernu 45 Reputation points Microsoft Employee
2025-03-09T01:21:40.7166667+00:00

Hi,

When navigating to the Search blade from within the Audit service, when I select 'Start recording user and admin activity', I receive the following error message: "Sorry, we're having trouble figuring out if activity is being recorded. Try refreshing the page. Start recording user and admin activity".

Any ideas why this is happening?

I'm assigned the right roles in Purview, Entra, and Exchange Online and I've tried multiple browsers.

Appreciate any support.

User's image

Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,443 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 114.9K Reputation points MVP
    2025-03-09T15:42:03.6666667+00:00

    Looks like the UI is having some issues... you can verify whether audit is enabled via PowerShell, too. First, connect to Exchange Online PowerShell, following the instructions here: https://learn.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps

    Then, run the following cmdlet:

    Get-AdminAuditLogConfig | Format-List UnifiedAuditLogIngestionEnabled

    If the status shows anything other than True, you can toggle it via:

    Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true

    More details can be found here: https://learn.microsoft.com/en-us/purview/audit-log-enable-disable?tabs=microsoft-purview-portal

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.