<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic O365 Duplicate events in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382284#M95240</link>
    <description>&lt;P&gt;Hello All,&lt;/P&gt;

&lt;P&gt;I m getting duplicate events for my O365 logs.Have checked from my O365 side configurations and seems everything fine from O365 end.&lt;/P&gt;

&lt;P&gt;Is this something need to corrected from Splunk side ??&lt;/P&gt;

&lt;P&gt;Thanks,&lt;/P&gt;

&lt;P&gt;Ramu.R&lt;/P&gt;</description>
    <pubDate>Mon, 20 May 2019 11:34:02 GMT</pubDate>
    <dc:creator>mailmetoramu</dc:creator>
    <dc:date>2019-05-20T11:34:02Z</dc:date>
    <item>
      <title>O365 Duplicate events</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382284#M95240</link>
      <description>&lt;P&gt;Hello All,&lt;/P&gt;

&lt;P&gt;I m getting duplicate events for my O365 logs.Have checked from my O365 side configurations and seems everything fine from O365 end.&lt;/P&gt;

&lt;P&gt;Is this something need to corrected from Splunk side ??&lt;/P&gt;

&lt;P&gt;Thanks,&lt;/P&gt;

&lt;P&gt;Ramu.R&lt;/P&gt;</description>
      <pubDate>Mon, 20 May 2019 11:34:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382284#M95240</guid>
      <dc:creator>mailmetoramu</dc:creator>
      <dc:date>2019-05-20T11:34:02Z</dc:date>
    </item>
    <item>
      <title>Re: O365 Duplicate events</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382285#M95241</link>
      <description>&lt;P&gt;@mailmetoramu &lt;/P&gt;

&lt;P&gt;I think you are facing Issue registered as known issue: ADDON-20076. Can you please check &amp;amp; confirm it? Or it something new.&lt;/P&gt;

&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/AddOns/released/MSO365/Releasenotes"&gt;https://docs.splunk.com/Documentation/AddOns/released/MSO365/Releasenotes&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 20 May 2019 12:32:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382285#M95241</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2019-05-20T12:32:21Z</dc:date>
    </item>
    <item>
      <title>Re: O365 Duplicate events</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382286#M95242</link>
      <description>&lt;P&gt;A possible better way of getting logs from O365/Azure: &lt;A href="https://answers.splunk.com/answers/678660/how-to-get-logs-from-azure-and-o365-into-splunk.html"&gt;https://answers.splunk.com/answers/678660/how-to-get-logs-from-azure-and-o365-into-splunk.html&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jul 2019 23:59:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/O365-Duplicate-events/m-p/382286#M95242</guid>
      <dc:creator>marycordova</dc:creator>
      <dc:date>2019-07-10T23:59:45Z</dc:date>
    </item>
  </channel>
</rss>

