All Apps and Add-ons

Microsoft Office 365 Reporting Add-on for Splunk

New Member

We are uploaded Microsoft Office 365 Reporting Add-on for splunk. We noticed splunk is unable to collect all the logs from EOP.
Outbound emails are 103 and splunk reports the outbound only 32. How do we address this gap.

More details.
Q. What is the deployment architecture of your Splunk? e.g. Search head clustering, indexing clustering, how many search heads instances or indexers instances.. etc.

Subbu: As this is a test environment,have only 1 search head

Q. Has this worked in the past? or Is that newly installed?

Subbu: This is newly installed and configured.

Q. When did you first notice this issue?

Subbu: After 24hrs from configuration.

Q. Have there been any recent changes to the application or the environment? (unique conditions, recent changes, updates, etc.)

Subbu: No changes

Q. What is the version of Splunk?

Q. What is the version of the add-on that you have installed? Where is the add-on installed? (i.e. on HF or SH)


Q. Are you facing issue with Microsoft Office 365 Reporting Add-on for Splunk?



0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...