Every administrative, endpoint, connector, sync, and access event is captured here.
401 Unauthorized
Audit data is never replaced with sample events. Confirm your Audit.Reader role and API availability, then retry.