Blog Post

Security, Compliance, and Identity Blog
7 MIN READ

Using the Office 365 Management Activity API and Power BI for security analysis (Part 1)

Anthony Smith (A.J.)'s avatar
Anthony Smith (A.J.)
Icon for Microsoft rankMicrosoft
May 02, 2018
Publishers note: I am posting this on behalf my colleague Jon Nordstrom who is part of the Office 365 customer experience team. Myself and few other engineers thought you would all benefit from his k...
Updated May 11, 2021
Version 6.0
microsoft 365
JonNordstrom's avatar
JonNordstrom
Icon for Microsoft rankMicrosoft
Nov 14, 2018

Thank you Steve for reaching out, I originally set this up using webhooks but found that the option I have with a timer function and cloud message queues are more performant. I still kept the WebHook code in there, since it may be useful for some scenarios.

 

The EnableSubscriptions.ps1 in the investigations folder is starting the subscriptions needed for the scheduled function. Please use the blog post steps to set the timer function up, I never created a dedicated .md for that config.

 

The one in the  root works with the description I have in readme.md

 

If you stick to the description on the repo and use https://github.com/OfficeDev/O365-ActivityFeed-AzureFunction/blob/master/ActivityFunctionApp.ps1 you can use the webhook function. Which is enabled by EnableSubscriptions.ps1 in the root. “Steps to Create the Azure Function”

 

Sorry for the confusion,

Jon