Configuring Office365¶

Registering the Office365 Fetcher in the Azure Active Directory¶

1. Go to the Azure Portal.

2. Enter your credentials for the Azure Portal.

3. Go to Azure Active Directory >> App registrations.

4. Click New registration.

Adding a New Application¶

5. Enter a Name.

6. Select Supported account types.

7. In the Redirect URI (optional) section:

   7.1 Select Public client (mobile & desktop).

   7.2 Enter the following address.

   http://localhost
   

8. Click Register.

Creating a New Application¶

Application ID¶

9. Go to API permissions.

10. Click Add a permission.

Adding a Permission¶

11. Click Microsoft APIs.

12. Select Office 365 Management APIs.

Selecting Office 365 Management APIs¶

13. Click Application permissions.

Application Permissions¶

14. Select all the available read permissions.

15. Click Add permissions.

Selecting Read Permissions¶

16. Click Grant admin consent for Default Directory.

Granting Admin Consent¶

17. Click Yes.

Confirmation Dialog Box¶

Grant Consent¶

18. Go to Authentication.

19. Enable Allow public client flows to Yes.

Public Client Flows¶

Alternatively, you can add the following key to the Manifest section in the Azure portal.

"allowPublicClient": true

20. Click Certifictes & secrets and Client secrets.

21. Click New client secret.

Client Secret¶

22. Enter a Description.

23. Select expiration date for the client secret in the Expires column.

24. Click Add.

Adding a Client Secret¶

Note

Note down the Value of the Client Secret before closing the window; otherwise, you cannot retrieve it later. You need the value to Configure the Office365 Fetcher in LogPoint.

Value of Client Secret¶

Uploading Certificates in the Azure Active Directory¶

1. Enter the following command in command prompt to generate a certificate key:

   openssl genrsa -out server.pem 2048
   

2. Enter the following command to create a certificate request:

   openssl req -new -key server.pem -out server.csr
   

3. Enter the following command in the command prompt to generate a certificate:

   openssl x509 -req -days 365 -in server.csr -signkey server.pem -out server.crt
   

4. Save the certificates generated.

5. Click Certificates & secrets on application page in the Azure Active Directory portal.

6. Click Certificates and Upload Certificate.

Uploading a Certificate¶

7. Select and upload the previously saved certificate with the extension .crt.

8. Enter a Description for the certificate.

9. Click Add.

Uploading a Certificate¶

Note

Note down the Thumbprint of a certificate. You need the value to Configure the Office365 Fetcher in LogPoint.

Value of Client Secret¶

Adding a Normalization Policy¶

1. Go to Settings >> Configuration >> Normalization Policies.

2. At the top left, click Add.

3. Enter a Policy Name.

4. In Compiled Normalizers, select Office365.

5. In Normalization Packages, select Office365.

6. Click Submit.

Adding a Normalization Policy¶

Configuring the Office365 Fetcher¶

1. Go to Settings >> Configuration >> Devices.

2. Click the Add collectors/fetchers () icon under Actions of the localhost device.

Adding a Fetcher for the Device¶

3. Click Office365 Fetcher.

Available Collectors Fetchers Panel¶

4. At the top left, click Add.

Office365 Fetcher Panel¶

5. Select a mode of Authentication:

   5.1. If you select the Public Client, enter the Username and Password for the Office 365 account.

   

   Public Client¶

   5.2. If you select Client Secret, enter the Value of Client Secret in the Client Secret field.

   

   Client Secret¶

   5.3. If you select Certificate,

   5.3.1. Enter the Office 365 Certificate Thumbprint in the Certificate Thumbprint field.

   5.3.2. Upload the previously saved Certificate with the .pem extension in the Certificate File option.

   

   Certificate Thumbnail¶

6. Enter the Fetch Interval (minutes).

7. Select a Processing Policy that uses the previously created normalization policy.

8. Enter the Directory (tenant) ID in the Tenant ID field.

9. Enter the Application (client) ID in the Application ID field.

11. Select Enable Proxy if you use a proxy server.

12. In the Proxy Configuration section:

    12.1 Enter the IP Address and the Port number for the proxy server.

    12.2 Select HTTP or HTTPS protocol.

13. Click Test to validate the configuration.

14. Click Submit.