The following article gives some explanation on the content you may see in your Activity log report.
How-to export the Activity log report
Select Activity from the sidebar, then use the radio buttons to filter between your tenant's Teams or all Groups. Apply a single filter, or multiple filters, to drill down into the activity log. Export your Activity log report as a CSV file.
For a step-by-step guide, see Export the Activity log report.
Your activity log displays up to 5000 activities performed since your first connection. Apply filters to view a specific set of activities from your history.
The Activity log report will contain information from the Activity page based on the filters you applied. When you open the file, all columns will be visible, though the values may be blank depending on what was filtered.
Rename your report using a naming structure that will help you recall the information. For example, if you have filtered for owners who added sensitivity tags to teams during the date range January 1st to 31st, name the file Team_sensitivity_added_210101_210131.CSV.
|EventDate||The date and time the activity occurred (in UTC). From the Activity page, you can apply a filter to specify the date range.|
|EventType||The type of activity that occurred. From the Activity page, you can apply a filter to specify the activity type(s) you want to export in your report.|
|GroupId||The ID of the Microsoft 365 group. Each Microsoft Team is associated with a Microsoft 365 group. For more information, see What is the relationship between Microsoft Teams, Microsoft 365 Groups, and Microsoft services?|
|GroupDisplayName||The display name of the team or group.|
|UserId||The user ID of the owner or admin who performed the activity.|
|UserFullName||The name of the owner or admin who performed the activity.|
|TeamsAssociated||Shows whether the Microsoft 365 group is associated with a Microsoft Team, where TRUE is associated and FALSE is not associated.|
|Policy||The ShareGate policy associated with the EventType. For example, sensitivity and purpose or the Inactivity detection policy.|
|CategorizeType||Shows if the categorization applied was for sensitivity or for purpose.|
|ItemDisplayName||Expands on information for the EventType column. For example, when a sensitivity tag is applied you will see the tag chosen; when an external link is deleted using the Teams management module you will see the link name; and so on.|
|OldItemDisplayName||When a feature or setting is changed, this column shows what it was changed from. The column ItemDisplayName shows what the feature or setting was changed to.|
|IsReminder||Shows if a notification was sent for the first time (FALSE) or as a reminder (TRUE).|
|GroupCount||Shows the number of teams and groups reviewed for external sharing and/or guest access.|
|ImpactedtUserId||The ID of the owner, member, or guest who had their membership changed.|
|ImpactedUserName||The name of the owner, member, or guest who had their membership changed. For example, a member may be added or a guest removed.|
|ContentDestination||When a team or group is archived, you can copy a file or folder to a user's OneDrive for Business. This column shows the OneDrive destination.|
|ContentType||Shows whether the content from the ContentTitle column was a file or folder.|
|ContentTitle||Shows the name of the content that was archived, downloaded from archival, or copied to OneDrive from archival.|
|ItemId||This column will not be populated.|