This app only supports data collected using the Splunk Add-on for Microsoft Office 365
If you are still using a legacy version of the Microsoft Cloud Services Add-on to ingest M365 data, it's recommended you use the dedicated O365 Add-on to ensure accuracy of results: https://splunkbase.splunk.com/app/4055/
Requirements:
This version leverages additional visualisations that do not ship with Splunk Enterprise. For the best experience, please also install the following visualisations:
Sankey Diagram: https://splunkbase.splunk.com/app/3112/
Timeline: https://splunkbase.splunk.com/app/3120
Semicircle Donut: https://splunkbase.splunk.com/app/4378
Note: These are not explicitly required, however certain panels will need to be modified to leverage the standard visualisations.
To provide feedback or enhancement requests please contact me: ry@splunk.com and/or submit a question on Splunk Answers
Use of this app is permitted subject to your obligations, including data privacy obligations, under your agreement with Splunk and Splunk's Privacy Policy. https://www.splunk.com/en_us/legal/privacy/privacy-policy.html
New Dashboard Studio Dashboards!
Defender dashboards are powered by data collected from the Splunk Add-on for Microsoft Security: Splunk Add-on for Microsoft Security - https://splunkbase.splunk.com/app/6207/
If you are ingesting data using the Defender Add-on, it's recommended that you migrate over to the supported Microsoft Security add-on. Check the add-on docs for migration instructions.
Updated support for jQuery3.5 + Splunk Cloud
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.