The event details pane contains the following additional information to help gain a better understanding of the activities taking place in Microsoft Office 365 Exchange Online, SharePoint Online, OneDrive for Business, and Azure Active Directory.
Displays a high-level view of the activity that is generated for each event. You can quickly see when the event occurred, who made the change, what changed, where the change originated, the activity as defined by the Azure Active Directory reporting APIs schema, the target, target synchronization type, activity type, category, and action.
Displays details on the property updates with the old and new value when available. It also displays information about multiple targets affected by a single event. For example, when a user added to a group, you can see both the user and the group as affected targets. When there are multiple targets, the target that best matches the activity type is displayed as the primary target in the Overview tab.
For Office 365, you can select to search all Office 365 services, or filter on SharePoint Online or OneDrive for Business or both. You can further refine the search by specifying the operation, file, folder, or site to search.
For Azure Active Directory, you can search all activity with the new Azure Active Directory subsystem or choose to refine your search by specifying the activity name, activity details, target, activity origin, or target sync type.