Forum Discussion

MitchM's avatar
MitchM
Resolver II
7 years ago

App/Workspace Name Changed in Audit Logs

Hi, I am not sure where the best place to put this i,b butI am hoping someone has an answer. We export Audit logs weekly from the O365 Admin Portal to measure global usage of PowerBI. We noticed that in the last few weeks almomst all App/Workspace names in AuditData.Workspace name is now showing as "Donald". No matter what report it is, or what App/Workspace it is in, it is showing Donald. Can anyone shed some light on this?

Need Help

5 Replies

  • v-jiascu-msft's avatar
    v-jiascu-msft
    Microsoft Employee
    7 years ago

    Hi MitchM,

     

    How did you export logs? Please refer to the snapshot below. It's good.

    App-Workspace-Name-Changed-in-Audit-Logs

     

    Best Regards,
    Dale

    • MitchM's avatar
      MitchM
      Resolver II
      7 years ago

      Hi Dale,

       

           sorry for the delay, we needed to test some thing out. This is not the issue we are seeing. All of the reports are in previously published, and used apps and are still being viewed in those Apps (none of which are named "Donald"). The change of the App/Workspace from the real Space name to "Donald" with the Activty type "Viewed in App" is very troubling to us as by definition I would think that "Audit Logs" should be trustworthy data. We are going to escalate this to our Microsoft representative as it has raised security concerns. 

       

      Regards

      • v-jiascu-msft's avatar
        v-jiascu-msft
        Microsoft Employee
        7 years ago

        Hi MitchM,

         

        OK, I will appreciate if you can share the result here when you get it.

         

        Best Regards,
        Dale