Forum Discussion

Skipster's avatar
Skipster
Copper Contributor
Jun 01, 2020

Office 365 connector

Hello   I am able to connect Azure AD to Sentinel and i can see audit and log in data from Azure AD, however i am not getting any data from O365. I can connect O365 to Azure Sentinel but i dont see...
GaryBushey's avatar
GaryBushey
Bronze Contributor
Jun 01, 2020

Skipster The error is referring to the parameters drop down at the top of the workbook.  There is a TimeRange, Workload, and UserType drop down and all three will need to be set.

Skipster's avatar
Skipster
Copper Contributor
Jun 01, 2020

GaryBusheyHi Gary

 

I dont have those options. See screen shot

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor
    Jun 01, 2020

    Skipster They are the two drop downs that have the red dot next to them

    • Skipster's avatar
      Skipster
      Copper Contributor
      Jun 01, 2020

      GaryBusheyUnderstood, however there is nothing to select in the drop down. It just says query failed

      • GaryBushey's avatar
        GaryBushey
        Bronze Contributor
        Jun 02, 2020

        Skipster OK, now I get it.   Those drop downs are looking for the "OfficeActivity" table which brings you back to your original statement about not having the data.  Sorry for all the confusion.

         

        BTW, deleting the workbook won't really do anything, it is the connector that is needed.  You said you have it connected and it states it is connected.  When you click on the Office 365 data connector, in the details pane on the right side, is there anything listed in the Data Received graph?