Sentinel collect cross tenant office 365 activity log

Copper Contributor

Hi all,

I am using Sentinel to collect my own tenant (tenant A) Office 365 activity log by Sentinel data collector. It just needs to click the configuration so that I can get the log.

CyrilChu_0-1657158988231.png

If I want to collect the office 365 activity log from another tenant (tenant B), how can I get the log?

I understand Lighthouse can build a connection across tenants but I don't want to create any new resource group or workspace in tenant B.

Any document that can tell me use API or other methods to collect tenant B's office 365 activity log from tenant A's Sentinel?

1 Reply