Getting Data In

O365 Duplicate events

mailmetoramu
Explorer

Hello All,

I m getting duplicate events for my O365 logs.Have checked from my O365 side configurations and seems everything fine from O365 end.

Is this something need to corrected from Splunk side ??

Thanks,

Ramu.R

Tags (1)

marycordova
SplunkTrust
SplunkTrust

A possible better way of getting logs from O365/Azure: https://answers.splunk.com/answers/678660/how-to-get-logs-from-azure-and-o365-into-splunk.html

@marycordova
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@mailmetoramu

I think you are facing Issue registered as known issue: ADDON-20076. Can you please check & confirm it? Or it something new.

https://docs.splunk.com/Documentation/AddOns/released/MSO365/Releasenotes

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...