Microsoft Office Message Trace REST API log source parameters for Microsoft Office Message Trace

If QRadar® does not automatically detect the log source, add a Microsoft Office Message Trace log source on the QRadar Console by using the Office 365 Message Trace REST API protocol.

When using the Microsoft Office 365 Message Trace REST API protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Microsoft Office 365 Message Trace REST API events from Microsoft Office 365 Message Trace:

Table 1. Microsoft Office 365 Message Trace REST API log source parameters for the Microsoft Office 365 Message Trace DSM
Parameter	Value
Log Source type	Microsoft Office 365 Message Trace
Protocol Configuration	Office 365 Message Trace REST API
Log Source Identifier	A unique name for the log source. The name can't include spaces and must be unique among all log sources of this type that are configured with the Office 365 Message Trace REST API protocol.

For a complete list of Office 365 Message Trace REST API protocol parameters and their values, see Office 365 Message Trace REST API protocol configuration options.