https://community.splunk.com/t5/Splunk-Enterprise/RWI-not-recogonizing-Authentication-logs/m-p/537398#M4772 <P>Hello there:)</P><P>I'm pulling Azure data via&nbsp;</P><P>Splunk Add-on for Microsoft Office 365</P><P>Microsoft Azure Add-on for Splunk</P><P>&nbsp;</P><P>both add-ons are CIM compliant, yet RWI is not able to recognize Azure AD signin logs - would there be anything else need to be configured?&nbsp;</P><P>&nbsp;</P><P>Thanks a lot</P> Wed, 27 Jan 2021 11:43:50 GMT pandacai 2021-01-27T11:43:50Z https://community.splunk.com/t5/Splunk-Enterprise/RWI-not-recogonizing-Authentication-logs/m-p/537398#M4772 <P>Hello there:)</P><P>I'm pulling Azure data via&nbsp;</P><P>Splunk Add-on for Microsoft Office 365</P><P>Microsoft Azure Add-on for Splunk</P><P>&nbsp;</P><P>both add-ons are CIM compliant, yet RWI is not able to recognize Azure AD signin logs - would there be anything else need to be configured?&nbsp;</P><P>&nbsp;</P><P>Thanks a lot</P> Wed, 27 Jan 2021 11:43:50 GMT https://community.splunk.com/t5/Splunk-Enterprise/RWI-not-recogonizing-Authentication-logs/m-p/537398#M4772 pandacai 2021-01-27T11:43:50Z