purview-v1.11.4

PAX Purview Audit Log Processor v1.11.4

Version 1.11.4 is a small, targeted update. It adds one new column — AgentPromptCount — to the M365 Usage rollup's SessionStats sidecar so dashboards can separate agent-driven prompts from direct Copilot prompts, and it fixes a SharePoint upload failure that prevented larger rollup CSVs (those over 4 MB) from being saved to a SharePoint destination. All other v1.11.3 behavior is preserved, and no switches are added or removed.

What's new in v1.11.4

• New AgentPromptCount column in the M365 SessionStats sidecar. The M365 Usage SessionStats sidecar now includes an AgentPromptCount column alongside its existing prompt, response, and session counts, reporting how many of a user's prompts on a given day and app surface landed on agent-flagged conversations. This lets the Analytics-Hub M365 Usage Analytics dashboard show an agent-versus-direct prompt split without re-querying the underlying data. The column is placed immediately after PromptCount (widening the sidecar from seven to eight columns), so tools that reference columns by name are unaffected; it is produced automatically on every rollup run, carried through -AppendFile merge runs, and written across all three storage tiers (local CSV, SharePoint, Fabric/OneLake). This rolls the embedded M365 rollup processor from v2.6.0 to v2.6.1; the Copilot rollup processor is unchanged.

• SharePoint upload fix for larger files. A bug that caused output files larger than 4 MB — most commonly the CopilotInteraction / M365 rollup CSV on real tenants — to fail their SharePoint upload with a 400 (Bad Request) error is fixed. Smaller artifacts in the same destination folder (such as the run log) were unaffected, which made the failure look like a per-file permission or folder problem when it was neither. Large CSVs now upload to SharePoint reliably.

---

The attached script is the v1.11.4 release build. See the documentation in the repository for full configuration details.