SOLVED

eDiscovery Logs in Microsoft Sentinel or Microsoft center

Brass Contributor

Hello,

 

Is there  a way to display the logs of eDiscovery events?

 

Thanks.

2 Replies
best response confirmed by Qusai_Ismail (Brass Contributor)
Solution
eDiscovery events are logged in the unified audit log, so as long as you're exporting that to Sentinel, you should already have them collected.

@Vasil Michev which data connector is required for eDiscovery logs? thanks.

1 best response

Accepted Solutions
best response confirmed by Qusai_Ismail (Brass Contributor)
Solution
eDiscovery events are logged in the unified audit log, so as long as you're exporting that to Sentinel, you should already have them collected.

View solution in original post