On Office 365 management API documentation eDiscovery Schema is listed underDLP Schema but I cannot see eDiscovery audit logs if I fetch the DLP API. Is there any separate endpoint to get these audit logs, or we need to apply any specific filter for these logs? I'm confused if eDiscovery logs are part of DLP logs or not. I know there is a different endpoint in Graph API for eDiscovery, but I want to know is there any way to get these logs using Management API.
Note that: eDiscovery logs are not part of the DLP logs in the Office 365 Management API.
You can list the ediscoveryCases
using the Microsoft Graph API:
Make sure to grant eDiscovery.Read.All
API permission.
GET https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases
You can also use the security endpoint to get eDiscovery audit logs.
GET https://graph.microsoft.com/v1.0/security/alerts
Based on the MsDoc the Office 365 Management Activity API includes audit logs for several services, but eDiscovery logs are not listed as one of the supported content types.
Reference: