Microsoft Office 365 Message Trace

The data source type for Microsoft Office 365 Message Trace collects JSON events from a Microsoft Office 365 Message Trace by using the Office 365 Message Trace API connector.

To integrate Microsoft Office 365 Message Trace with QRadar®, complete the following steps:
  1. Add a Microsoft Office 365 Message Trace data source by using the Office 365 Message Trace API connector in the QRadar product.
    Tip: Basic authorization is the only authentication method that is supported by the Office 365 Message Trace API.

For more information about adding a data source, see Adding ingestion data sources.

If you are an IBM® QRadar user, see Terminology changes for QRadar customers.