Use the Office 365 Audit log search page to start recording user and admin activity in your organization. After Office 365 prepares the audit log, you can search it for a broad range of activities including uploads to OneDrive or SharePoint Online or user password resets. Note that mailbox auditing is set up separately.