Microsoft 365 App for Splunk

The Microsoft 365 App for Splunk provides dashboards for Microsoft 365 data retrieved using the following Add-ons: Splunk Add-on for Microsoft Office 365 - https://splunkbase.splunk.com/app/4055/ Splunk Add-on for Microsoft Security - https://splunkbase.splunk.com/app/6207/ Microsoft 365 Reporting Add-on for Splunk - https://splunkbase.splunk.com/app/3720/ Microsoft Teams Add-on for Splunk - https://splunkbase.splunk.com/app/4994/ Dashboards: - Azure Active Directory - Defender 365 - Defender for Endpoint - User Audit dashboard - Exchange - SharePoint - OneDrive - Microsoft Teams - Power BI - Full step-by-step data onboarding guide It is anticipated that future versions may include additional dashboards and data from other Microsoft 365 services.