Showing results for 
Search instead for 
Did you mean: 
Level 7
Report Inappropriate Content
Message 1 of 3

O365 integration

Can anyone direct me to how to integrate O365 with SIEM.

I have a microsoft document of what they tell you to do and there is some set up on the O365 platform and a JAR file to run to start a SIEM agent but i am unsire if i need that on the ESM for a separate syslog server.

Also, i am not sure how to add the device.


Any ideas, information appreciated.

2 Replies
Reliable Contributor sssyyy
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: O365 integration

ESM supports O365 via API. Have a look at the data source config guide. There's a section just for O365.


Re: O365 integration

Interested to know if anyone else gets HTTP 400 errors when testing the connection to O365 from the McAfee SIEM. Most of what I've seen suggests this is an issue with cookies in Chrome, but thus far deleting cookies has not worked.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community