office365-audit-log-collector icon indicating copy to clipboard operation
office365-audit-log-collector copied to clipboard

Collect / retrieve Office365, AzureAD and DLP audit logs and output to PRTG, Azure Log Analytics Workspace, SQL, Graylog, Fluentd, and/or file output.

Results 10 office365-audit-log-collector issues
Sort by recently updated
recently updated
newest added

Hello, I have saved the output to SQL. But i see that data is getting deletd from the tables. Also no last_run file is getting created under windows. I have...

Typically shows the same output every time it errs: > > Starting run @ 2022-10-05 06:50:04.387915. Content: deque(['Audit.General', 'Audit.AzureActiveDirectory', 'Audit.Exchange', 'Audit.SharePoint', 'DLP.All']). > Traceback (most recent call last): > File...

Hello When I try to run the collector with the tenant ID, client key, secret key and the fullConfig.yaml I get the error message "Error logging in: "'access_token'". I don't...

Hello, I'm trying the latest version but I got this error ``` thread 'main' panicked at src\api_connection.rs:59:33: Could not parse API login reply: error decoding response body: missing field `access_token`...

Thanks a lot for your effort to keep this tool running! I am collecting the O365 Logs for over 10,000 Users and put them into a Log Analytics workspace. I...

Hello everyone, is it also possible to tell the tool that it should only retrieve the logs of the last 30 seconds (for example)? That way I could run the...

I am getting this error on run: `error decoding response body: invalid type: map, expected a sequence at line 1 column 0` ```shell # ./OfficeAuditLogCollector -V office_audit_log_collector 2.5.0 ``` ```shell...

When the Client tries to download the Blob file from Microsoft, it seems not to send the Bearer Token with the Request: ![image](https://github.com/ddbnl/office365-audit-log-collector/assets/25774289/5b858d4e-5cf3-4b0d-80f2-b438d6d390ee) Whatever I try, I get these error...

What is the Parameter for the Workspace Secret? It's missing in your Config-Template ``` output: azureLogAnalytics: workspaceId: xxxx enabled: True ``` ![image](https://github.com/ddbnl/office365-audit-log-collector/assets/25774289/9f28b87b-c6be-45c7-85c4-63e8c3bbb01b)

I am running latest version on Linux since early June 2024, and it has been working fine. However, since last week I noticed that there are problems with the program....