how can I forward Microsoft 365 logs to my Syslog server?

Question

Kailas Bharambe 20

Need your help to forward Microsoft 365 logs to my Syslog server.

--Kailas

Clive Watson 7,316 Reputation points MVP

2023-10-26T11:09:01.72+00:00

Can I ask why? There is a built-in M365 Connector to send your logs to Microsoft Sentinel, so there is no need to go via Syslog? Or are you trying to send them to Syslog after they have been in Sentinel?
Kailas Bharambe 20 Reputation points

2023-10-26T11:28:29.78+00:00

How i can enable or configure Microsoft Sentinel in my MS365?

Accepted answer

0 additional answers

Clive Watson 7,316 Reputation points MVP

2023-10-26T11:09:01.72+00:00

Can I ask why? There is a built-in M365 Connector to send your logs to Microsoft Sentinel, so there is no need to go via Syslog? Or are you trying to send them to Syslog after they have been in Sentinel?
Kailas Bharambe 20 Reputation points

2023-10-26T11:28:29.78+00:00

How i can enable or configure Microsoft Sentinel in my MS365?

Answer 1

Clive Watson 7,316 MVP

To enable the Defender Connector to allow you to connect M365 to Microsoft Sentinel, please see: https://learn.microsoft.com/en-us/azure/sentinel/connect-microsoft-365-defender?tabs=MDE

Pay special attention to the prerequisites mentioned.

If this helps, please accept the answer.

Kailas Bharambe 20 Reputation points

2023-10-27T05:43:52.26+00:00

thank you, I need to add Microsoft Sentinel to my subscription. Because it is now showing in test mode