Microsoft 365 Alert – Service Degradation – Microsoft Copilot (Microsoft 365) – Admins may be unable to see IP address information in the audit logs for Microsoft Copilot (Microsoft 365) interactions – RESOLVED

Announcements Shagufta Naaz

20/05/2026 09:08:00 AM

NHSmail Reference: INC46831267

Microsoft Reference: CP1315951

Issue Status: RESOLVED

Issue Description: Admins may be unable to see IP address information in the audit logs for Microsoft Copilot (Microsoft 365) interactions.

Final Update: 21/05/2026 08:51:00 AM – Microsoft has validated with a subset of affected users that impact has been successfully remediated following our roll back of the offending service update which introduced impact.

Scope of impact: Any admin looking for the IP address information in the audit logs for Copilot interactions is impacted. This section may be updated as our investigation progresses.

Root cause: A recent service update removed the logic that records the IP information in the audit logs for Copilot interactions.

Next steps : Microsoft are reviewing our service update validation and implementation processes to improve how they detect potential IP address information logic removal issues and prevent similar service events from occurring in the future.