How can I index message tracking logs from Office 365?

[kiran331]

Hi,
We are using the Splunk Add-on for Microsoft Cloud Services to get management logs. Is there a way to ingest all the mail logs into Splunk?

[jconger · Accepted solution]

The Microsoft Office 365 Reporting Add-on for Splunk pulls message trace logs -> https://splunkbase.splunk.com/app/3720/

[lfedak_splunk]

Hey @kiran331, check out this similar post for discussion on this topic. https://answers.splunk.com/answers/520459/import-office365-message-tracking-logs-into-splunk.html