Audit logs allow us, as administrators, the ability to find specific actions done by specific people in any or all applications in our tenant.

In this chapter, we'll take a look at the tools available for configuring audit logs and policies. While this chapter is short, it will cover basic abilities in auditing that are likely to appear on the exam:

• Configuring audit log retention
• Configuring the audit policy
• Monitoring unified audit logs
• Azure AD audit and sign-in logs

Let's begin with configuring audit log retention.