SGBox O365 application configuration
In this section is explained how to configure SGBox O365 app in order to retrieve logs from Microsoft Azure.
Using the SGBox web interface: SGBOX > SCM > Applications
In section Vendors Integration find the O365 application and click on Install
Choose an hostname for the new host. In this example we choose Host-O365.
Select the information you want retrieve, then click OK
Click on edit and enter the token used to retrieve to authentication on your Azure tenant
Click play to retrieve your logs
If there are any errors on during the connection, authentication or authorization will be shown in the notification sections:
After configured you need to:
- Schedule the app: https://www.sgbox.it/sgbox/EN/knowledge-base/schedule-application/
- Download the patterns to analyze the raw logs.