Microsoft 365 Alert – Service Degradation – Microsoft Copilot (Microsoft 365) – Admins may be unable to see IP address information in the audit logs for Microsoft Copilot (Microsoft 365) interactions – NEW

Announcements Shagufta Naaz

20/05/2026 09:08:00 AM

NHSmail Reference: INC46831267

Microsoft Reference: CP1315951

Issue Status: OPEN

Issue Description: Admins may be unable to see IP address information in the audit logs for Microsoft Copilot (Microsoft 365) interactions.

Current Update: 20/05/2026 09:08:00 AM–Microsoft has reverted the recent service update which removed the logic that records the IP information in the audit logs for Copilot interactions and they are reaching out to a subset of affected users to validate that impact has been remediated.

Scope of impact: Any admin looking for the IP address information in the audit logs for Copilot interactions is impacted. This section may be updated as our investigation progresses.

Root cause: A recent service update removed the logic that records the IP information in the audit logs for Copilot interactions.

Next update by: Wednesday, May 20, 2026, at 9:00 PM UTC