Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only
  • 1.  Office 365 Exchange logs

    Posted Mon April 24, 2023 07:52 AM

    Hello everyone, 
    i want to get the office 365 exchange logs like message delivery, message send, received and generally the mail activity. I have integrated the office 365 but i only get account login/logout and stuff like that. Is there any way i can get the mail log activity as well? something in auditing level maybe? thanks in advance. 



    ------------------------------
    Nikos Kalonikolaou
    ------------------------------


  • 2.  RE: Office 365 Exchange logs

    Posted Tue April 25, 2023 04:35 AM

    Hi Nikos,

    Can you entered the log paths. Sometimes default directory can be changed. Also these directories need to be shared and if you don't collect them locally you need to give read permission to the folder with "inheritence" settings. In addition, if you collect them, check fw settings for 445 and 139. 



    ------------------------------
    İsmail Kaya
    ------------------------------



  • 3.  RE: Office 365 Exchange logs

    Posted Tue April 25, 2023 04:43 AM

    thank you for your answer, i get these logs from my exchange server. thats a different question however. I want to collect the logs from  my office 365 log source. I ve done the integration, i get mail creation, mail deletion and mail moved to another file, but i dont get mail SEND and mail RECEIVED. I want to have the sender, recipient, subject, to enforce rules.



    ------------------------------
    Nikos Kalonikolaou
    ------------------------------



  • 4.  RE: Office 365 Exchange logs
    Best Answer

    Posted Tue April 25, 2023 07:10 AM

    Did you use O365 or Microsoft Office 365 Message Trace protocol. Mail activities are collected under trace protocol logs. Related page is below:

    https://www.ibm.com/docs/en/dsm?topic=microsoft-office-365-message-trace

    I hope will be beneficial.

    Regards,



    ------------------------------
    İsmail Kaya
    ------------------------------



  • 5.  RE: Office 365 Exchange logs

    Posted Tue April 25, 2023 07:16 AM

    yes. that helped. thank you!!



    ------------------------------
    Nikos Kalonikolaou
    ------------------------------