Is there going to be an app to pull data from Microsoft's recently released Office 365 Management Activity API?

[klemaned]

Microsoft recently released their Management Activity API. It’s supposed to be similar to the Box API where you can retrieve activity related to security and compliance, covering Azure, Mail, and SharePoint. Do you know if the app developers at Splunk are working on anything to pull this data? I really don’t want to spend any time developing something internal if it’s something Splunk is already working on.

[NimrodSky]

Hi,

SkyFormation does exactly that, you can see us at Splunk base - https://splunkbase.splunk.com/app/2932/

SkyFormation retrieves the data from Office 365, enrich and normalize it, then communicates it to Splunk in Syslog\CEF format.

Feel free to contact me directly - nimrod (at) skyformation.com

Nimrod

[cladd_splunk]

We are developing a TA that would use Microsoft's management activity API for Office 365. Hope to have something available late this spring.