Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Current »

Overview

The Microsoft 365 Reporting web service enables developers to integrate information on email and spam, antivirus activity, compliance status, and Lync Online activities into their custom service reporting applications and web portals.

This topic provides an overview of the REST web service, the functional architecture, the reports available, and other ways you can access the reports.

Devo collector features

Feature

Details

Allow parallel downloading (multipod)

not allowed

Running environments

  • collector server

  • on-premise

Data sources

Data source

Table

Collector service

Remote endpoint

Description

MailTrafficReport

cloud.office365.reporting.mailtraffic

office365_reporting_MailTraffic_service

https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MailTraffic

Summary information about mail traffic to and from the organization

MailTraffic report

DlpDetailReport

cloud.office365.reporting.dlpdetail

office365_reporting_DlpDetail_service

https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/DlpDetailReport

List details about Data Loss Prevention (DLP) rule matches for Exchange Online, SharePoint Online, and OneDrive for Business in your cloud-based organization

Get-DlpDetailReport (ExchangePowerShell)

SpoofMailReport

cloud.office365.reporting.spoofmail

office365_reporting_SpoofMail_service

https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/SpoofMailReport

Summary information about mail traffic from spoofed (forged) senders (phishing, spam)

View email security reports - Microsoft Defender for Office 365

AdvancedThreatProtectionTrafficReport

cloud.office365.reporting.atptraffic

office365_reporting_AdvancedThreatProtectionTraffic_service

https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MailTrafficATP

Results of Exchange Online Protection and Microsoft Defender for Office 365 detections in your cloud-based organization

Get-MailTrafficATPReport (ExchangePowerShell)

MessageTraceDetail

cloud.office365.reporting.messagetrace

office365_reporting_MessageTrace_service

https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace

Summary information about the processing of email messages that have passed through the Office 365 system for the organization

MessageTrace report

DlpReport

cloud.office365.reporting.dlp

office365_reporting_Dlp_service

https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/DlpDetectionsReport

List a summary of Data Loss Prevention (DLP) rule matches for Exchange Online, SharePoint Online and OneDrive for Business in your cloud-based organization

Get-DlpDetectionsReport (ExchangePowerShell)

MailDetailATP

cloud.office365.reporting.maildetailatp

office365_reporting_MailDetailATP_service

https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/MailDetailATP

List details about Exchange Online Protection and Microsoft Defender for Office 365 detections in your cloud-based organization

Get-MailDetailATPReport (ExchangePowerShell)

SafelinksDetail

cloud.office365.reporting.safelinksdetail

office365_reporting_SafelinksDetail_service

https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/SafelinksDetail

Detailed information about Safe Links results

Get-SafeLinksDetailReport (ExchangePowerShell)

There are additional reports in the service not supported yet. You can find all the available reports/resources in the API requesting to https://reports.office365.com/ecp/reportingwebservice/reporting.svc (use your Office365 credentials) The service is also to be deprecated by Microsoft, therefore you may find reports not longer available.

For more information on how the events are parsed, visit our page.

Vendor setup

In order to configure the collector, you need to have valid Office365 credentials.

Run the collector

Once the data source is configured, you can either send us the required information if you want us to host and manage the collector for you (Cloud collector), or deploy and host the collector in your own machine using a Docker image (On-premise collector).

Change log

Release

Released on

Release type

Details

Recommendations

v0.4.1-beta

BUG FIXING
IMPROVEMENT

Improvements:

  • Updated DCSDK from 1.7.2 to 1.11.1 and added auto update SDK feature.

Bug fixing:

  • Fixed a bug in office365_exchange_reports_if:0.4.1-beta causing 500 errors due to invalid start_time range requests.

Update

  • No labels