I was trying to access Office365 Audit logs through Office365 Management API(Link). I have done most of the configurations as described in the link. I am able to get AuzreActiveDirectory audit data. But SharePoint and Exchange audit logs are not working.
Note: I have not used webhook. Does this has something to do?
Any help is appreciated.
webhooks are optional. Once you subscribe to a particular content type (EXO, SPO, AAD), you can periodically poll for new content using the /content operation.
When you first subscribe, there can be a lag before data is first available. Are you still not seeing EXO or SPO data?