SOLVED

Office 365 alerts

%3CLINGO-SUB%20id%3D%22lingo-sub-1417303%22%20slang%3D%22en-US%22%3EOffice%20365%20alerts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1417303%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20of%20all%2C%20thank%20you%20for%20the%20help.%3C%2FP%3E%3CP%3EI%20manage%20several%20companies%20with%20Microsoft%20365%20and%20I%20have%20created%20several%20security%20alerts.%3C%2FP%3E%3CP%3EI%20would%20like%20to%20know%20how%20to%20export%20and%20import%20them%2C%20in%20order%20to%20have%20centralized%20control%20of%20alerts%20for%20various%20clients.%3C%2FP%3E%3CP%3EThank%20you%20!!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1417303%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1418091%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20alerts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1418091%22%20slang%3D%22en-US%22%3E%3CP%3EWhat's%20generating%20the%20alerts%3F%20If%20those%20are%20alert%20policies%2Factivity%20alerts%20or%20anything%20that's%20available%20within%20the%20Unified%20audit%20log%2C%20you%20can%20use%20the%20corresponding%20PowerShell%20cmdlets%20or%20the%20Graph%20APIs.%20Or%20you%20can%20export%20them%20to%20Azure%20Sentinel%20and%20such.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1418618%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20alerts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1418618%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%3C%2FP%3E%3CP%3Ethanks%20!!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20mean%20the%20definition%20of%20alerts%20from%20the%20security%20and%20compliance%20center%2C%20the%20definition%2C%20not%20the%20log%20with%20the%20data%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1419656%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20alerts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1419656%22%20slang%3D%22en-US%22%3E%3CP%3EPowerShell%20can%20help%20with%20that%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

First of all, thank you for the help.

I manage several companies with Microsoft 365 and I have created several security alerts.

I would like to know how to export and import them, in order to have centralized control of alerts for various clients.

Thank you !!!

3 Replies
Highlighted
Solution

What's generating the alerts? If those are alert policies/activity alerts or anything that's available within the Unified audit log, you can use the corresponding PowerShell cmdlets or the Graph APIs. Or you can export them to Azure Sentinel and such.

Highlighted

@Vasil Michev

thanks !!!

 

I mean the definition of alerts from the security and compliance center, the definition, not the log with the data

Highlighted

PowerShell can help with that :)