Office365SharePointFileOperation log type

TABLE

Office365SharePointFileOperation

RECORDTYPE

Based on RecordType, this field indicates the operation performed by the record.
For this log type its value is 6
For available RecordType values, you can visit Microsoft’s documentation here.

AADSESSIONID

Based on AADSessionId, a value derived from the AppAccessContext field.

SITEURL

Based on SiteUrl, this field contains the URL of the site the file or folder accessed by the user is located.

SRCRELATIVEURL

Based on SourceRelativeUrl, this field contains the URL of the folder that contains the file accessed by the user.

SRCFILENAME

Based on SourceFileName, this field contains the name of the file or folder accessed by the user.

SRCFILEEXTENSION

Based on SourceFileExtension, this field contains the file extension of the file that was accessed by the user.

DSTRELATIVEURL

Based on DestinationRelativeUrl, this field contains the URL of the destination folder a file is copied or moved.

DSTFILENAME

Based on DestinationFileName, this field contains the name of the file that is copied or moved.

DSTFILEEXTENSION

Based on DestinationFileExtension, this field contains the file extension of a file that is copied or moved.

USERSHAREWITH

Based on UserSharedWith, this field contains the user that a resource was shared with.

SHARINGTYPE

Based on SharingType, this field contains the type of sharing permissions that were assigned to the user that the resource was shared with.

LISTID

Based on ListId, this field contains the Guid of the list.

LISTITEMUNIQUEID

Based on ListItemUniqueId, this field contains the ID of the application performing the operation.

WEBID

Based on WebId, there’s no available documentation for this field.

FILESIZE

Based on FileSizeBytes, there’s no available documentation for this field.

HIGHPRIOMEDIAPROC

Based on HighPriorityMediaProcessing, there’s no available documentation for this field.

IMPLICITSHARE

Based on ImplicitShare, there’s no available documentation for this field.

SNAREDATAMAP

All unclassified field(s) parsed from this log type will be pushed into the SNAREDATAMAP.