The Audit Log in Office 365 is disabled, by default, presumably to save disk space.
To enable the audit log in your tenant, in the Office 365 Admin Portal browse to the Security & Compliance Admin Center -> Search & investigation -> Audit log search. Click Start recording user and admin activities then click Turn On.
Or you can use this PowerShell command:
Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true
Source: TechNet
For you Office 365 subscribers, as of today, the Azure Active Directory version 2 PowerShell module can be downloaded from the below site which also contains a full list of the cmdlets available.
https://docs.microsoft.com/en-us/powershell/azuread/v2/azureactivedirectory
In case you weren’t aware, Microsoft has provided a free, online PowerShell Command Builder utility:
I recommend that you bookmark it and refer to it whenever you need to double-check the commands in your scripts. You may want to download the Getting Started Guide.
Make sure that the first thing you do is to select the appropriate version of SharePoint from the Products dropdown.
The rest is pretty straightforward.
Enjoy.
Powered by WordPress & Theme by Anders Norén