Microsoft Office 365 Message Trace

The IBM® Security QRadar® Log Insights for Microsoft Office 365 Message Trace collects JSON events from a Microsoft Office 365 Message Trace by using the Office 365 Message Trace API connector.

To integrate Microsoft Office 365 Message Trace with QRadar, complete the following steps:
  1. Add a Microsoft Office 365 Message Trace data source by using the Office 365 Message Trace API connector in QRadar Log Insights.
    Tip: Basic authorization is the only authentication method that is supported by the Office 365 Message Trace API.

For more information about adding a data source, see Adding ingestion data sources.

If you are an IBM QRadar user, see Terminology changes for QRadar customers.