One question about “Microsoft Office 365 App for Splunk”.
Can it use log data from “Microsoft Azure Active Directory Add-on for Splunk” for the Azure AD logs?
Or does it can only get logs data from “Splunk Add-on for Microsoft Office 365”?
If it can only get logs data from “Splunk Add-on for Microsoft Office 365”, should we disabled the logs data from “Microsoft Azure Active Directory Add-on for Splunk”?
If both “Splunk Add-on for Microsoft Office 365” & “Microsoft Azure Active Directory Add-on for Splunk” get data from Azure AD, will they get duplicate logs?
Thank you.