Configuration requirements
To run this collector, there are some configurations detailed below that you need to consider.
Configuration | Details |
---|---|
Microsot Azure account | It is a requirement to have an account so you can run this collector. |
Microsoft 365 account | It is a requirement to have an account so you can run this collector. |
More information
Refer to the Vendor setup section to know more about these configurations.
Overview
Office 365 is a widely adopted productivity suite from Microsoft. The suite includes Microsoft Exchange Online collaboration service for email, calendars, contacts, and tasks. Message tracing is one of the basic tools used by administrators to monitor email flow.
Some email information is stored in logs and is available for administrative purposes. The administrator will be able to see sent and received emails even though the user has deleted or purged them. With message tracing, you can’t see the content of the messages but you can get very useful information such as:
Sender and recipient.
Send and received dated.
Subject and size of the email.
Status and details of events. There are seven possible values in the delivery status field: delivered, failed, pending, expanded, quarantined, filtered as spam, and unknown.
IP address used to send the message.
Message ID: This is a unique number that identifies the message. If a message is sent to more than one recipient it will display once for every recipient, but all will have the same Message ID.
Message tracking logs
You won’t be able to edit the messages in Office 365 since they are not simple text files. To do that you can use message tracking logs in on-prem Exchange that allow you to edit them directly since they are simple text files.
Devo collector features
Feature | Details |
---|---|
Allow parallel downloading ( |
|
Running environments |
|
Populated Devo events |
|
Flattening preprocessing |
|
Data sources
Data source | Description | API endpoint | Collector service name | Devo table | Available from release |
---|---|---|---|---|---|
Message Reports | Reports for every email sent and received through the Exchange Online organization |
|
|
|
|
For more information on how the events are parsed, visit our page.
Vendor setup
There are some minimal requirements to enable this collector:
Microsoft Azure account: The account must be able to register applications and assign roles.
Microsoft Office 365 account: The account must have administrative permissions in the Office 365 organization.
There are some configurations you need to do to enable the collector.
Minimum configuration required for basic pulling
Although this collector supports advanced configuration, the fields required to retrieve data with basic configuration are defined below.
This minimum configuration refers exclusively to those specific parameters of this integration. There are more required parameters related to the generic behavior of the collector. Check setting sections for details.
Setting | Details |
---|---|
| This is the Tenant ID you copied during the Obtain the client credentials step. |
| This is the Application (client) ID you copied during the Obtain the client credentials step. |
| This is the created secret’s Value field you copied during the Obtain the client credentials step. |
See the Accepted authentication methods section to verify what settings are required based on the desired authentication method.
Accepted authentication methods
Authentication method | Username | Password | Tenant ID | Client ID | Client Secret |
---|---|---|---|---|---|
Modern OAuth2 Auth |
|
| REQUIRED | REQUIRED | REQUIRED |
Basic User/Password Auth | DEPRECATED | DEPRECATED |
|
|
|
Run the collector
Once the data source is configured, you can either send us the required information if you want us to host and manage the collector for you (Cloud collector), or deploy and host the collector in your own machine using a Docker image (On-premise collector).
Collector services detail
This section is intended to explain how to proceed with specific actions for services.
Events service
Collector operations
This section is intended to explain how to proceed with specific operations of this collector.
Change log
Release | Released on | Release type | Details | Recommendations |
---|---|---|---|---|
| IMPROVEMENT | Improvements:
|
| |
| BUG FIXINGIMPROVEMENT | Improvements:
Bug fixing:
|
| |
| NEW FEATURE | New features:
Improvements:
|
|