The following table describes the file and folder activities in SharePoint Online and OneDrive for Business. The value in the Friendly name column is the activity name displayed in the Activities drop-down list on the Audit log search page and in the results. The value in the Operation column is the activity name from the Office 365 Management API schema.
||User or system account accesses a file.
|Checked in file
||User checks in a document that they checked out from a document library.
|Checked out file
||User checks out a document located in a document library. Users can check out and make changes to documents that have been shared with them.
||User copies a document from a site. The copied file can be saved to another folder on the site.
||User deletes a document from a site.
|Discarded file checkout
||User discards (or undos) a checked out file. That means any changes they made to the file when it was checked out are discarded, and not saved to the version of the document in the document library.
||User downloads a document from a site.
||User or system account modifies the content or the properties of a document located on a site.
||User moves a document from its current location on a site to a new location.
||User renames a document on a site.
||User restores a document from the recycle bin of a site.
||User uploads a document to a folder on a site.