EmailEvents table is empty

[DanuN123]

Hi ,

I have noticed the EmailEvents table is empty in Microsoft sentinel > Logs > EmailEvents

I have defender for business licensing, believe this has similar features to defender 365 P1 ,

So do we need the Defender 365 P2 licensing to gets logs ? Or is there any other reason ? 

Thanks in advanced 

[#2 · Accepted solution]

Please see https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/advanced-hunting-surfacing-more-e... - P2 is required.

[#3]

Thanks :)