Why does the Heat Map report show that I am in another country?
When you open Microsoft OneNote, the program synchronizes your notebooks with SharePoint Online.
This process goes through a user agent that can be identified by either onenotemodernsynccontentsync or onenotemodernsynccontentono.
The detail recorded in the unified audit logs shows as FileAccessed, with the IP address being the server handling the synchronization.
Ultimately, this could be India, Ireland, America or any other foreign country that has the capacity at the time to handle it.
[Edit 2019-08-05]
Confirmed in a support call with Microsoft that these are load balancing or system operations; and they are in fact occurring on Microsoft systems.
Related Articles
Heat Map - IP Address Location Accuracy
We get IP addresses from users who access sites on-premise, but with SharePoint Online, Microsoft captures the IP address and then sends it to us. We then use a service to identify the location of the IP address. This process is accurate to the ...
How does SharePoint Vitals show my data so quickly?
The data is processed with Azure Tables and aggregated hourly with timer jobs to “cache” the results. If you ever encounter any technical issue or delay, please contact us at hello@sharepointvitals.com for assistance. for assistance.
I’m getting an error when I try to connect to the Office 365 audit logs. How do I fix it?
You may receive the following message when trying to connect to the Office 365 audit logs: “The permission set () sent in the request does not include the expected permission.” If you do experience this issue, there are three possible reasons and ...
SharePoint Vitals API
SharePoint Vitals API SharePoint Vitals brings all the user activity data you could ever want to your fingertips. Now you can access your analytics data through a REST API. For more information about the client app that captures analytics data, ...