Filter audit events by the available actor, action, resource, date, or result fields. Open an event for its recorded detail and preserve the link or export according to firm procedure.
An empty filtered result means no matching event was returned for the authorized scope; it is not proof that an event could never have occurred outside that scope.
Data and Privacy provides the workspace's available export and privacy operations. Confirm scope, authorization, destination, encryption, retention, and who will receive the file before starting an export.
Exports create another copy that must be governed after it leaves the platform.
Matter closure, policy retention, legal hold, privacy requests, and workspace deletion are different operations. Determine which rule governs, record the decision, and avoid deleting data merely to remove it from daily navigation.