RWI not recogonizing Authentication logs

Splunk Enterprise

Hello there:)

I'm pulling Azure data via

Splunk Add-on for Microsoft Office 365

Microsoft Azure Add-on for Splunk

both add-ons are CIM compliant, yet RWI is not able to recognize Azure AD signin logs - would there be anything else need to be configured?

Thanks a lot

Get Updates on the Splunk Community!

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Watch Now! In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...