SOLVED

Best way to Monitor M365 services on prem

%3CLINGO-SUB%20id%3D%22lingo-sub-2074858%22%20slang%3D%22en-US%22%3EBest%20way%20to%20Monitor%20M365%20services%20on%20prem%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2074858%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20tried%20to%20utilize%20Splunk%20O365%20plug%20in%20to%20better%20monitor%20alerts%20but%20quickly%20realized%20that%20Microsoft%20Throttles%20'%3CSPAN%3Emessage%20trace%20logs'.%20It%20looks%20great%20and%20would%20give%20us%20better%20insight%20into%20the%20services%20we%20pay%20for.%20Reason%20being%20I%20need%20your%20feedback%20for%20a%20monitoring%20solution%20is%20today%20we%20have%20to%20go%20to%20several%20websites%20to%20obtain%20a%20picture%20of%20services%20that%20are%20impacting%20our%20production.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fstatus.office.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fstatus.office.com%2F%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2Fmsft365status%3Flang%3Den%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftwitter.com%2Fmsft365status%3Flang%3Den%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fportal.office.com%2Fservicestatus%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.office.com%2Fservicestatus%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdowndetector.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdowndetector.com%2F%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fstatus.azure.com%2Fen-us%2Fstatus%3FWT.mc_id%3DA52BDE99C%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fstatus.azure.com%2Fen-us%2Fstatus%3FWT.mc_id%3DA52BDE99C%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20well%20as%20the%20Admin%20portal.%20Out%20of%20the%20box%20the%20alerting%20from%20Microsoft%20seems%20to%20be%20lacking%20and%20seeing%20if%20anyone%20has%20come%20across%20a%20tool%20that%20works%20effectively%20instead%20of%20going%20to%20a%20multitude%20of%20websites%20please%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2074858%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2075087%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20way%20to%20Monitor%20M365%20services%20on%20prem%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2075087%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20you%20only%20care%20about%20SHD%2Fmessage%20center%20posts%2C%20you%20can%20collect%20those%20via%20API.%20If%20you%20want%20to%20check%20each%20individual%20workflow%20from%20your%20location(s)%2C%20you%20will%20have%20to%20use%20a%20tool%20that%20generates%20some%20traffic%2Faction%20across%20a%20given%20endpoint...%20and%20those%20are%20a%20lot.%26nbsp%3BThere%20are%20some%20third-party%20products%2C%20there's%20nothing%20that%20will%20cover%20each%20individual%20service%20within%20M365.%20Really%20depends%20on%20how%20granular%20you%20want%20to%20go.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2076420%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20way%20to%20Monitor%20M365%20services%20on%20prem%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2076420%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20cost%20with%20SHD%20-%20API%20setup%2Fintegration%20and%20would%20you%20have%20a%20step%20by%20step%20whitepaper%20that%20goes%20over%20this%20setup%20in%20detail%20please%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

We tried to utilize Splunk O365 plug in to better monitor alerts but quickly realized that Microsoft Throttles 'message trace logs'. It looks great and would give us better insight into the services we pay for. Reason being I need your feedback for a monitoring solution is today we have to go to several websites to obtain a picture of services that are impacting our production.

https://status.office.com/

https://twitter.com/msft365status?lang=en

https://portal.office.com/servicestatus

https://downdetector.com/

https://status.azure.com/en-us/status?WT.mc_id=A52BDE99C

As well as the Admin portal. Out of the box the alerting from Microsoft seems to be lacking and seeing if anyone has come across a tool that works effectively instead of going to a multitude of websites please?

5 Replies

If you only care about SHD/message center posts, you can collect those via API. If you want to check each individual workflow from your location(s), you will have to use a tool that generates some traffic/action across a given endpoint... and those are a lot. There are some third-party products, there's nothing that will cover each individual service within M365. Really depends on how granular you want to go.

@Vasil Michev 

 

Is there a cost with SHD - API setup/integration and would you have a step by step whitepaper that goes over this setup in detail please?

Whoops, messed up threads :)

 

Here's a quick guide I wrote a while back:  https://www.michev.info/Blog/Post/1939/getting-shd-details-via-the-office-365-management-api-in-powe...

@Vasil Michev 

 

Is there a cost?

Best Response confirmed by Chad Rodriguez (Contributor)
Solution

No cost, as long as you have a valid O365 SKU.