https://community.splunk.com/t5/Getting-Data-In/Difference-between-AD-logs-from-M365-add-on-app-and-Azure-add-on/m-p/567250#M100770 <P>Hey all,</P><P>Is it possible for an overlap of Azure AD sign-ins? I don't want to have duplicate logs and wasting ingestion. Can anyone help and explain the differences between these 2?</P><P>They both appear to have inputs for Azure AD sign-ins.</P><P><A href="https://splunkbase.splunk.com/app/4055/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/4055/</A></P><P><A href="https://splunkbase.splunk.com/app/3757/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/3757/</A></P><P>Thanks</P> Thu, 16 Sep 2021 12:08:41 GMT oliverb_pickles 2021-09-16T12:08:41Z https://community.splunk.com/t5/Getting-Data-In/Difference-between-AD-logs-from-M365-add-on-app-and-Azure-add-on/m-p/567250#M100770 <P>Hey all,</P><P>Is it possible for an overlap of Azure AD sign-ins? I don't want to have duplicate logs and wasting ingestion. Can anyone help and explain the differences between these 2?</P><P>They both appear to have inputs for Azure AD sign-ins.</P><P><A href="https://splunkbase.splunk.com/app/4055/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/4055/</A></P><P><A href="https://splunkbase.splunk.com/app/3757/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/3757/</A></P><P>Thanks</P> Thu, 16 Sep 2021 12:08:41 GMT https://community.splunk.com/t5/Getting-Data-In/Difference-between-AD-logs-from-M365-add-on-app-and-Azure-add-on/m-p/567250#M100770 oliverb_pickles 2021-09-16T12:08:41Z