Can Microsoft Purview Track File Uploads to Slack or Zalo?
Question details
The user wants to know if Microsoft Purview Data Loss Prevention (DLP) Activity Explorer is capable of tracking and monitoring file uploads made through third-party desktop messaging applications like Slack and Zalo.
- Product
- Microsoft Purview
- Device & OS
- not provided
- Scenario
- Monitoring sensitive file sharing and tracking user upload activities on third-party communication platforms for organizational data compliance.
- Observed behavior
- Visibility into file uploads through certain third-party desktop messaging apps is missing or inconsistent, depending heavily on the specific application, endpoint DLP configurations, and supported event types.
Ensure you have global administrator or compliance administrator permissions in the Microsoft 365 admin center before attempting to verify Purview DLP policies or contact support.
Verify Endpoint DLP Configurations and Contact Support
Check your endpoint data loss prevention settings and escalate the issue to the Microsoft Purview compliance team to investigate untracked activities.
Microsoft Purview's ability to track file activities in third-party messaging apps like Slack or Zalo relies entirely on your endpoint DLP configurations, active policies, and audit settings. Since these backend configurations are unique to your tenant, unresolved issues require direct investigation by Microsoft support.
Navigate to the Activity Explorer in the Microsoft Purview compliance portal and check the 'Labeling actions' report to confirm if the specific third-party application and upload actions are supported events.
Verify that your endpoint DLP policies are properly configured to monitor the specific desktop messaging applications and that the necessary audit settings are applied to user endpoints.
If upload activities are still missing, log in to the Microsoft 365 admin center, navigate to 'Support' > 'Help & support', and submit a service request for the Purview compliance team to investigate your tenant configuration.
Looking for a Secure, Lightweight Alternative to Microsoft Office?
While Microsoft Purview handles complex enterprise compliance for Microsoft 365, smaller teams or individual professionals might prefer a lighter, more straightforward office suite. WPS Office provides excellent document creation and editing tools, complete format compatibility, and robust built-in security features without the heavy enterprise overhead.
Frequently Asked Questions
Why are Slack file uploads not showing in Purview Activity Explorer?
Activity Explorer only displays events supported by your current endpoint DLP policies. If Slack uploads are missing, the endpoint agent might not be configured to monitor the Slack desktop app, or the specific upload action might not trigger the designated audit policy.
Does Microsoft Purview support tracking file uploads on all desktop messaging apps?
No, tracking capabilities depend heavily on the specific third-party application, your endpoint DLP configuration, and whether the file upload action generates a system event that the Purview agent can capture. Some apps like Zalo may require specialized endpoint integration.
How do I check what specific events Activity Explorer can currently track?
You can navigate to the Activity Explorer console in your Microsoft Purview portal to see the list of active 'Labeling actions' and audited events, or review the official Microsoft documentation on Data Classification Activity Explorer.
