Forum Discussion

Skipster's avatar
Skipster
Copper Contributor
Jun 01, 2020

Office 365 connector

Hello   I am able to connect Azure AD to Sentinel and i can see audit and log in data from Azure AD, however i am not getting any data from O365. I can connect O365 to Azure Sentinel but i dont see...
GaryBushey's avatar
GaryBushey
Bronze Contributor
Jun 01, 2020

Skipster They are the two drop downs that have the red dot next to them

Skipster's avatar
Skipster
Copper Contributor
Jun 01, 2020

GaryBusheyUnderstood, however there is nothing to select in the drop down. It just says query failed

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor
    Jun 02, 2020

    Skipster OK, now I get it.   Those drop downs are looking for the "OfficeActivity" table which brings you back to your original statement about not having the data.  Sorry for all the confusion.

     

    BTW, deleting the workbook won't really do anything, it is the connector that is needed.  You said you have it connected and it states it is connected.  When you click on the Office 365 data connector, in the details pane on the right side, is there anything listed in the Data Received graph?

    • Skipster's avatar
      Skipster
      Copper Contributor
      Jun 02, 2020

      GaryBusheyHi Gary. No, no data is listed in the "Data revived" pane

      • GaryBushey's avatar
        GaryBushey
        Bronze Contributor
        Jun 02, 2020

        Skipster At this point you may need to open a ticket with MS to figure out what is going on.