...
By default it will write the activity that was blocked, Every record will include the From field value to be the user that has performed the operation and the activity type (for example File sharing, Desktop sharing etc)
Which activities are registered in the auditing ?
Auditing all activities
In order to audit all activities, go to settings> Auditing and enable “Monitor all communication traffic”
...
For example , if in the meeting there are M1,M2, E1, E2. Now, once user E3 will join, the following records will be added to the auditing:
From | To | Policy |
|---|---|---|
M1 | E3 | Pb |
M2 | E3 | Pa |
The From value always contains a managed user when auditing record Scope is Meeting and the Activity Type is Audio.
...
When M2 joins , both M1 will report and M2 will report
From | To |
|---|---|
M2 | M1 |
If now M3 will join the table will appear as follow:
From | To |
|---|---|
M2 | M1 |
M3 | M1 |
M3 | M2 |
If M3 will be blocked from joining because of M1 he will appear in the To value
From | To |
|---|---|
M2 | M1 |
M1 | M3 |
M3 | M2 * |
This record will not always appear as it depends how quick was M3 removed
...