We have integrated O365 Management logs with our SIEM tool. And we are observing logs for user deleted, added etc. but the problem is we are not getting the actual username in the logs. But we are getting some random numbers instead of correct usernames.
e.g. is <random_numbers>@<ourdomain>.onmicrosoft.com
Kindly help why it is showing in this format also how can we get the exact user which got deleted.