Hi Expert
Can Microsoft Dynamics 365 data be ingested to Microsoft Security and Compliance portal and from there it can be fed and extracted to Splunk? I'm looking to implement and wonder if this could be a potential solution.
Unlike Splunk has an add-on for Microsoft Office 365, where we can use Office 365 management activity API to retrieve information (https://docs.splunk.com/Documentation/AddOns/released/MSO365/About)
Also looking at this link (https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api...),
PowerApps/ D365 data can be ingested to Microsoft Security and Compliance Centre portal and from here the data can be extracted using APIs link to SIEM (Splunk) via AuditRecordType = e.g. 45 PowerApps portal event or 21 for Dynamics 365 events.
is my understanding correct? Appreciate your response.
Regards/Somnath
