Mar 01 2019 04:31 AM
My office 365 says its connected, but no longs are coming into Sentinel..
Mar 01 2019 05:02 AM
Mar 01 2019 05:42 AM - edited Mar 01 2019 06:03 AM
Behavior from my testing so far:
Mar 02 2019 09:17 PM
Thomas,
Thanks for telling us about your experience. I'm adding @Koby Koren and @Shalini Pasupneti so they can note the issue and your feedback.
Mar 02 2019 09:19 PM
Kjetil,
Thanks for the detailed feedback. We'll look into these issues (CC: @Koby Koren and @Shalini Pasupneti).
Mar 03 2019 10:58 PM
Thank you. I once in a while get this error while trying:
Mar 04 2019 08:28 AM
Same issue here, I will give a day and check on it tomorrow.
Mar 04 2019 05:53 PM
My O365 data has populated overnight / within 24hrs.
Mar 05 2019 10:42 PM - edited Mar 05 2019 10:43 PM
Mar 05 2019 10:42 PM - edited Mar 05 2019 10:43 PM
Uri Arjitecter over at https://techcommunity.microsoft.com/t5/Azure-Sentinel/Connect-to-Azure-Active-Directory/m-p/360557/h...had the answer for me.
Needed to enable integrate Azure AD Logs with Log Analytics https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-...and it now works fine.
Thanks @Uri Arjitecter
Mar 06 2019 06:46 AM - edited Mar 06 2019 06:51 AM
Mar 06 2019 06:46 AM - edited Mar 06 2019 06:51 AM
Connected Office 365 activity log connector over 48h ago, still no data.
This is true for our tenant only (Pay-as-you-go). For two other tenants (CSP Subscriptions) it seems to work.
I'm available for troubleshooting if any Microsoft peeps are interested. PM me or email me.