Automated Purview audit log reports?

[colonel_claypoo]

I don't have much Power BI experience but wanted to know if it's possible to create reports from the Purview audit log data?
I know the manual and PowerShell way to get the data from Purview into Power BI. However, I'm looking for an automated, ideally unattended solution. I've read about the Office 365 Management Activity API and I'm thinking it might be an option if there was a way to connect this to a Power BI dataset/report. I appreciate your ideas.

[nilendraFabric · Accepted solution]

Hello @colonel_claypoo 

there are many methods to do this including the one you mentioned using O365 management api

Office 365 Management Activity API :

The Office 365 Management Activity API provides programmatic access to audit log data and can be used to create automated, unattended solutions. To use this method:
• Register an application in Azure AD and configure appropriate permissions
• Use the API to retrieve audit log data programmatically
• Connect the API to Power BI using Power Query or custom connectors

azure event hub

Microsoft Purview can be configured to stream audit logs to Azure Event Hubs. From there, you can:
• Capture the streaming data in Azure Storage
• Use Azure Data Factory or other ETL tools to process the data
• Load the processed data into Power BI for reporting

Power Automate (Flow) Integration
You can create a Power Automate flow to:
• Periodically retrieve audit log data using the Office 365 Management Activity API
• Process and filter the data as needed
• Write the data to a SharePoint list or other data source
• Connect the data source to Power BI for reporting

Even Azure log analytics will solve this as well

Please accept the solution and give kudos if this is helpful 

[colonel_claypoo]

I think Azure Event Hub would incur additional costs but might be the easiest route to set up. Hadn't though about Power Automate in combination with the Management API. Will look further into both. Thanks.

[v-hashadapu]

Hi @colonel_claypoo , thank you for reaching out to the Microsoft Fabric Community Forum.

Just wanted to confirm if your issue is been solved. If it is, please mark it 'Accept as Solution'. If not, then please share the details for us to work together to solve it.