Azure-Sentinel icon indicating copy to clipboard operation
Azure-Sentinel copied to clipboard

Published 20 hours ago • verified publisher icon Azure

Data Connector Exchange Security Insights On-Premise Collector

Open NickNicolaou2129 opened this issue 1 year ago • 4 comments

Describe the bug The data connector "Exchange Security Insights On-Premise Collector" is not collecting any data after installing the collection script, adding the permissions, and setting up a schedule.

To Reproduce Steps to reproduce the behavior:

  1. Go to the data connector page in Sentinel and follow all of the steps.
  2. Install the collection script as instructed.
  3. Ensure the account has the correct permissions and setup the schedule.

Schedule is setup image

Script runs successfully image

Account has correct permissions: image

Exchange Configuration Function has errors: image

Exchange Environment List has errors: image

Expected behavior I expect to see the logs arrive in Azure Sentinel when I search the table name ESIExchangeConfig_CL

NickNicolaou2129 avatar Feb 05 '24 15:02 NickNicolaou2129

Hi @NickNicolaou2129, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 12-02-2024. Thanks!

v-sudkharat avatar Feb 06 '24 06:02 v-sudkharat

Hi @NickNicolaou2129, Could you please share mail address with us So if required, we connect with you via call and check on issue. Thanks!

v-sudkharat avatar Feb 09 '24 06:02 v-sudkharat

Email sent to you

NickNicolaou2129 avatar Feb 09 '24 10:02 NickNicolaou2129

@NickNicolaou2129, Thanks!

v-sudkharat avatar Feb 09 '24 10:02 v-sudkharat

Hi @NickNicolaou2129 ,Scheduled call with you on 15Feb24,please join the meeting for further trouble shooting.

v-muuppugund avatar Feb 12 '24 05:02 v-muuppugund

Hi @NickNicolaou2129 ,As discussed on friday,need more details with logs,could you please share it,if needed we can have a call over teams with Exchanges server team

v-muuppugund avatar Feb 18 '24 16:02 v-muuppugund

Hi @v-muuppugund, I sent this to your email last Friday. I will send it again

NickNicolaou2129 avatar Feb 19 '24 08:02 NickNicolaou2129

Hi @NickNicolaou2129 ,The logs shared earlier are the table logs and yesterday in teams call shared the server logs and have trouble shooting session today with server team.

v-muuppugund avatar Feb 22 '24 03:02 v-muuppugund

HI @NickNicolaou2129 ,as discussed on last call,scripts and shared the logs ,scripts are executing 5n now,please let me know if any issues.

v-muuppugund avatar Feb 27 '24 01:02 v-muuppugund

Hi @NickNicolaou2129, Could you please check on the above comment and let us know if your issue get resolve. Thanks!

v-sudkharat avatar Feb 29 '24 09:02 v-sudkharat

Resolved

NickNicolaou2129 avatar Feb 29 '24 13:02 NickNicolaou2129