Forum Discussion
ThoFord
Mar 01, 2019Brass Contributor
Office 365 connected but no logs.
My office 365 says its connected, but no longs are coming into Sentinel..
Kjetil Skjørvestad
Mar 03, 2019Copper Contributor
Thank you. I once in a while get this error while trying:
Experiencing authentication issues
The portal is having issues getting an authentication token. The experience rendered may be degraded. Additional information from the call to get a token: Extension: appinsightsextension Resource: loganalyticsapi Details: code: 0, statusText: error, message: ajaxExtended call failed, stack:
---
Data from O365 works very well while Azure AD just refuse to connect.
Kjetil Skjørvestad
Mar 05, 2019Copper Contributor
Uri Arjitecter over at https://techcommunity.microsoft.com/t5/Azure-Sentinel/Connect-to-Azure-Active-Directory/m-p/360557/highlight/true#M56 had the answer for me.
Needed to enable integrate Azure AD Logs with Log Analytics https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analyticsand it now works fine.
Thanks Uri Arjitecter