Do you see any errors in the _internal index related to this add-on? index=_internal source="*ta_ms_o365_reporting_ms_o365_message_trace*" Also, check your input parameters like window size and delay throttle. For more information on what those settings do, check out this post -> https://answers.splunk.com/answers/719725/input-settings-for-microsoft-office-365-reporting.html ... View more

Hi Niket, This was very helpful, and MOP was the requirement too, but could not able to find the documentation for mopclass and I am very new to splunk, not getting how to go ahead. These are the type of transactions- VISA, MasterCard, cash, AX, ECHECK etc. could you please these things as well. Thank you very much ... View more