The easiest way to turn on audit logging is through the Security & Compliance Center user interface. To do this, follow these steps:
- Navigate to the Security & Compliance Center (https://protection.office.com).
- Expand Search and select Audit log search. If audit logging is not enabled, you will see a banner that indicates you must turn it on to record user and admin activity, as shown in the following screenshot:

- Select Turn on auditing.
- If prompted, click OK to allow the organization configuration to be updated.