It seems the choice microsoft is giving us is: "do you want your data now but it'll probably be incomplete or do you want all of it but 24 hours late?" which is just unacceptable. I can't understand how anyone would make this work at all for anything that matters. Certainly not in a security use case. Is there actually a way to get basic email logs from o365 with at least sender, recipients, subject and size in a timely manner? ... View more

That's OK then. ... View more