Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Not Able To See Sharepoint Logs on Azure Sentinel

Copper Contributor

Hi Team,
We have enabled "Office 365 - Sharepoint" logs but we don't see any logs coming to Sentinel. It shows green status for "data connector" & also "Sharepoint" option is selected but I still don't see any data. Can someone let me know what other things I should check to make sure I am getting the data?

2 Replies
Just wondering if any settings needs to be changed from sharepoint side. Any help would be appreciated.
Did you try disconnecting and connecting back with the global admin tenant permission. If the issue still persists try looking into the activities setting and permission at the Sharepoint ?