Forum Discussion
Harold_Quiroga
Nov 09, 2021Copper Contributor
Consult mailbox exchange online with sentinel
I have a request from my company which wants through sentinel to obtain this information Automatic
1. File Upload of mail traces
2. Less time to download the traces.
3. Quick query of mailboxes in any date range
4. Guarantee a long Retention Time of the traces.
5. Audit of mailboxes.
any suggestions?
thx
- Clive_WatsonBronze Contributorthe is a great summary here https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/how-to-protect-office-365-with-azure-sentinel/ba-p/1656939
https://github.com/OfficeDev/O365-ActivityFeed-AzureFunction/tree/master/Sentinel/msgtrace
Sentinel by default will store the data for 90days, this can be increased in the UI for up to 2yrs. Long term retention is also available. 90days --> 100yrs.