Aug 05 2019 04:35 PM
Hi
When we are trying to ingest Office 365 Activity logs to Azure Sentinel we cant see our Office 365 Tenancy. The user is GA and has 4433 open.
Any other considerations?
Aug 06 2019 02:41 AM
Hello @Fergie635
So the 'add tenant' button is greyed out? Have you met all the other requirements and refreshed as well?
Aug 06 2019 07:31 AM - edited Aug 06 2019 07:35 AM
@CliveWatsonThe tenant does not show up when trying to add it. You can see that the workspace and solutions permissions are correct. The account is also a global admin and security admin, though the security admin should be redundant since it is a global admin. You can see that the O365 solution is enabled, but the tenant is not appearing so that we can add it.
Aug 06 2019 07:43 AM
Hi @cjohnson my only other thought, are you on E3? https://docs.microsoft.com/en-us/azure/sentinel/connect-office-365
Aug 06 2019 08:01 AM
@CliveWatsonYes, we use E3s. I can confirm that the O365 Audit Logging is enabled.