Getting Data In

Difference between AD logs from M365 add-on app and Azure add-on app

oliverb_pickles
Loves-to-Learn

Hey all,

Is it possible for an overlap of Azure AD sign-ins? I don't want to have duplicate logs and wasting ingestion. Can anyone help and explain the differences between these 2?

They both appear to have inputs for Azure AD sign-ins.

https://splunkbase.splunk.com/app/4055/

https://splunkbase.splunk.com/app/3757/

Thanks

Labels (2)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!