• [Office 365] Azure Active Directory - Sub Parser for DeviceProperties

    In default parser for Office 365, there is no token to parser "DeviceProperties" in Azure Active Directory (AAD) Logs. DeviceProperties contains Id, DisplayName, OS, BrowserType, etc. This info is useful for user to analyze where the request comes…
  • Allow the Office 365 SmartConnector to pull logs from Office 365 GCC environments

    In reference to Support Ticket 01830853 and Change Request 342101, it would be nice that the Microsoft Office 365 Management Activity SmartConnector is able to pull logs from Office 365 GCC - Service Descriptions | Microsoft Learn environments.
  • Support for Microsoft Cloud App Security (MCAS) Through the Microsoft Office 365 Management Activity SmartConnector

    Support for Microsoft Cloud App Security (MCAS) is available through a separate standalone integration available on the ArcSight Marketplace, however, Micro Focus should build out and support collection though their native Microsoft Office 365 Management…
  • Parsing Issues in Microsoft O365 Teams

    Hello Team, While integrating O365 Teams, we observed parsing issues for the below fields, Here are the details: Device Product: Microsoft Teams > For Name: TeamSettingChanged = raw log fields: 'OldValue' & 'NewValue' not getting Parsed. > For Name: MemberAdded…
  • O365 ArcSight Connector not working

    After I have put in all the right credentials of the O365 connector I get this error, has anyone run in to this problem or got any ideas of how to resolve it? [ERROR][default.com.arcsight.agent.loadable.agent._Office365RestApiConnector][initAccessToken…
  • New O365 SmartConnector Stopped Working

    Hello everyone, I deployed the new Microsoft O365 SmartConnector (version 7.2.3.7789 running on Windows Server 2012 R2) that uses the new Activity API about 3 weeks ago. I was able to configure it successfully and we were receiving Azure Active Directory…