Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
161b06f
V1 to V2 apps migration (release_2)
JV0812 Jun 3, 2024
a1b3572
minor fix
JV0812 Jun 3, 2024
7fac2b4
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
7642d25
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
ff61707
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
85100cf
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
a3dfbbc
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
5d3e930
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
fb9f26f
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Jun 5, 2024
c694176
Update docs/integrations/saas-cloud/microsoft-exchange-trace-logs.md
JV0812 Jun 5, 2024
10413b9
Update docs/integrations/saas-cloud/gmail-tracelogs.md
JV0812 Jun 5, 2024
2a302c2
Update docs/integrations/saas-cloud/gmail-tracelogs.md
JV0812 Jun 5, 2024
0682681
Update docs/integrations/microsoft-azure/teams.md
JV0812 Jun 5, 2024
5010893
Update docs/integrations/microsoft-azure/teams.md
JV0812 Jun 5, 2024
62e36fe
Update docs/integrations/microsoft-azure/teams.md
JV0812 Apr 4, 2025
4aa69f1
Update docs/integrations/microsoft-azure/teams.md
JV0812 Apr 4, 2025
9e337de
Merge branch 'main' into V1-to-V2-apps-migration
JV0812 Apr 8, 2025
7b18650
Fix broken anchor link
jpipkin1 Apr 8, 2025
825b461
Merge branch 'main' into V1-to-V2-apps-migration
jpipkin1 Apr 8, 2025
36e4af3
Remove FAQ section from Threat Intel Quick Analysis article
jpipkin1 Apr 8, 2025
a33ab97
Merge branch 'main' into V1-to-V2-apps-migration
jpipkin1 Apr 8, 2025
cc7f488
Update comments in threat intel quick analysis article
jpipkin1 Apr 14, 2025
3fa5617
Merge branch 'main' into V1-to-V2-apps-migration
kimsauce Apr 25, 2025
64e3a78
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Apr 30, 2025
cae26d3
Update docs/integrations/security-threat-detection/threat-intel-quick…
JV0812 Apr 30, 2025
99df797
minor fixes
JV0812 May 2, 2025
c75856d
Merge branch 'V1-to-V2-apps-migration' of https://github.com/SumoLogi…
JV0812 May 2, 2025
b906c59
Update teams.md
JV0812 May 2, 2025
2296a64
Update gmail-tracelogs.md
JV0812 May 2, 2025
f58ecb2
Merge branch 'main' into V1-to-V2-apps-migration
JV0812 May 2, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
43 changes: 29 additions & 14 deletions docs/integrations/microsoft-azure/teams.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,14 @@
id: teams
title: Microsoft Teams
sidebar_label: Microsoft Teams
description: The Microsoft Teams app provides out-of-the-box dashboards to monitor users, teams, channels and permission changes.
description: The Microsoft Teams app provides out-of-the-box dashboards to monitor users, teams, channels, and permission changes.
---

import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('img/integrations/microsoft-azure/MSTeams.png')} alt="thumbnail icon" width="75"/>

The Microsoft Teams app provides out-of-the-box dashboards to monitor users, teams, channels and permission changes.
The Microsoft Teams app provides out-of-the-box dashboards to monitor users, teams, channels, and permission changes.


## Log types
Expand Down Expand Up @@ -49,28 +49,43 @@ _sourceCategory="O365/General"
| count by operation
```

## Collecting Logs
## Collecting logs

This section has instructions for collecting logs for the Sumo App for Teams.
This section has instructions for collecting logs for the Sumo Logic app for Teams.

### Collection process overview

To collect logs for Microsoft Teams, please configure an Office 365 Audit Source. The Teams logs will be present in the “Office 365 General Logs” context. Note, that if you are already collecting logs for Office 365, you can simply make note of the source category configured for the aforementioned context.

## Installing the Microsoft Teams app

## Installing the Microsoft Teams App
This section shows you how to install the Sumo Logic app for Microsoft Teams.

This section shows you how to install the Sumo Logic App for Microsoft Teams.
import AppInstall2 from '../../reuse/apps/app-install-v2.md';

import AppInstall from '../../reuse/apps/app-install.md';
<AppInstall2/>

<AppInstall/>
## Upgrading the Microsoft Teams app (Optional)

## Viewing Microsoft Teams Dashboards
import AppUpdate from '../../reuse/apps/app-update.md';

<AppUpdate/>

## Uninstalling the Microsoft Teams app (Optional)

import AppUninstall from '../../reuse/apps/app-uninstall.md';

<AppUninstall/>

## Viewing Microsoft Teams dashboards

import ViewDashboards from '../../reuse/apps/view-dashboards.md';

<ViewDashboards/>

### Overview

The Teams - Overview dashboard provides an at-a-glance view of the state of your Teams environment in terms of user sessions, teams and channel activity, and user role changes
The **Teams - Overview** dashboard provides an at-a-glance view of the state of your Teams environment in terms of user sessions, teams and channel activity, and user role changes

Use this dashboard to:
* Identify user sessions relative to their locations.
Expand All @@ -82,7 +97,7 @@ Use this dashboard to:

### User Sessions

The Teams - User Sessions dashboard provides an in depth view of the user logins and related statistics in your Teams environment
The **Teams - User Sessions** dashboard provides an in depth view of the user logins and related statistics in your Teams environment

Use this dashboard to:
* Identify user sessions relative to their locations and compare login statistics over time.
Expand All @@ -93,7 +108,7 @@ Use this dashboard to:

### Team Statistics

The Teams - Team Statistics dashboard offers complete details on the Team activity occurring in your organization.
The **Teams - Team Statistics** dashboard offers complete details on the Team activity occurring in your organization.

Use this dashboard to:
* Gain insight into teams being added and removed.
Expand All @@ -105,7 +120,7 @@ Use this dashboard to:

### Channel Statistics

The Teams - Channel Statistics dashboard offers complete visibility into the Channel activity occurring in your Teams.
The **Teams - Channel Statistics** dashboard offers complete visibility into the Channel activity occurring in your Teams.

Use this dashboard to:
* Gain insight into the channels being added and removed.
Expand All @@ -118,7 +133,7 @@ Use this dashboard to:

### User and Role Changes

The Teams - User and Role Changes dashboard provides insight on the user and role changes being applied in your environment.
The **Teams - User and Role Changes** dashboard provides insight on the user and role changes being applied in your environment.

Use this dashboard to:
* Report on the users making role changes and the top object types being affected.
Expand Down
33 changes: 22 additions & 11 deletions docs/integrations/saas-cloud/gmail-tracelogs.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ The Sumo Logic App for Gmail Trace Logs uses [Gmail Logs via BigQuery](https://s

For details, see the [Schema for Gmail logs in BigQuery](https://support.google.com/a/answer/7230050?hl=en&ref_topic=7233311).

### Sample Logs
### Sample logs

```json
{
Expand Down Expand Up @@ -138,28 +138,39 @@ _sourceCategory=Labs/GmailTraceLogs

## Collecting Logs for Gmail Trace Logs app

This section provides instructions for setting up [Cloud-to-Cloud-Integration for Gmail Trace Logs App](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/gmail-tracelogs-source.md) to create the source and use the same source category while installing the app.
This section provides instructions for setting up [Cloud-to-Cloud-Integration for Gmail Trace Logs app](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/gmail-tracelogs-source.md) to create the source and use the same source category while installing the app.

## Installing the Gmail Trace Logs app

import AppInstall from '../../reuse/apps/app-install.md';
import AppInstall2 from '../../reuse/apps/app-install-v2.md';

<AppInstall/>
<AppInstall2/>

## Viewing Gmail Trace Logs Dashboards

**All dashboard have a set of filters** that you can apply to the entire dashboard, as shown in the following example. Click the funnel icon in the top dashboard menu bar to display a scrollable list of filters that are applied across the entire dashboard.
## Upgrading the Microsoft Teams app (Optional)

You can use filters to drill down and examine the data on a granular level. Filters include client country, client device type, client IP, client request host, client request URI, client request user agent, edge response status, origin IP, and origin response status.
import AppUpdate from '../../reuse/apps/app-update.md';

**Each panel has a set of filters** that are applied to the results for that panel only, as shown in the following example. Click the funnel icon in the top panel menu bar to display a list of panel-specific filters.
<AppUpdate/>

### Security Overview Dashboard
## Uninstalling the Microsoft Teams app (Optional)

**Gmail Trace Logs - Security Overview**. This dashboard lets you monitor spam messages, malware threats, dropped messages, and rejected messages.
import AppUninstall from '../../reuse/apps/app-uninstall.md';

<AppUninstall/>

## Viewing Gmail Trace Logs dashboards

import ViewDashboards from '../../reuse/apps/view-dashboards.md';

<ViewDashboards/>

### Security Overview

The **Gmail Trace Logs - Security Overview** dashboard lets you monitor spam messages, malware threats, dropped messages, and rejected messages.

<img src={useBaseUrl('img/integrations/saas-cloud/tracelogsapp-overview.png')} alt="Gmail Trace Logs Overview" width="900"/>

**CrowdStrike Analysis**. To protect your organisation from threats, the app also scans the SHA256 hash of Gmail attachments with CrowdStrike's threat detection service.
The **CrowdStrike Analysis**. To protect your organisation from threats, the app also scans the SHA256 hash of Gmail attachments with CrowdStrike's threat detection service.

<img src={useBaseUrl('img/integrations/saas-cloud/crowdstrike-analysis.png')} alt="Crowdstrike Analysis" width="900"/>
28 changes: 20 additions & 8 deletions docs/integrations/saas-cloud/microsoft-exchange-trace-logs.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,21 +94,33 @@ This section explains how to collect logs from Microsoft Exchange Trace logs Api

## Installing the Microsoft Exchange Trace Logs app

import AppInstall from '../../reuse/apps/app-install.md';
import AppInstall2 from '../../reuse/apps/app-install-v2.md';

<AppInstall/>
<AppInstall2/>

## Viewing Microsoft Exchange Trace Logs Dashboards
## Upgrading the Microsoft Exchange Trace Logs app (Optional)

* All dashboard have a set of filters that you can apply to the entire dashboard, as shown in the following example. Click the funnel icon in the top dashboard menu bar to display a scrollable list of filters that are applied across the entire dashboard.
* You can use filters to drill down and examine the data on a granular level. Filters include client country, client device type, client IP, client request host, client request URI, client request user agent, edge response status, origin IP, and origin response status.
* Each panel has a set of filters that are applied to the results for that panel only, as shown in the following example. Click the funnel icon in the top panel menu bar to display a list of panel-specific filters.
import AppUpdate from '../../reuse/apps/app-update.md';

<AppUpdate/>

## Uninstalling the Microsoft Exchange Trace Logs app (Optional)

import AppUninstall from '../../reuse/apps/app-uninstall.md';

<AppUninstall/>

## Viewing Microsoft Exchange Trace Logs dashboards

import ViewDashboards from '../../reuse/apps/view-dashboards.md';

<ViewDashboards/>

### Overview

**Microsoft Exchange Trace Logs - Overview**. The Dashboard provides information on the delivery status of messages, including outliers, and a summary of the message size. <br/><img src={useBaseUrl('img/integrations/saas-cloud/microsoft-exchange-trace-logs-overview.png')} alt="Microsoft Exchange Trace Logs Overview" width="900"/>
The **Microsoft Exchange Trace Logs - Overview** dashboard provides information on the delivery status of messages, including outliers, and a summary of the message size. <br/><img src={useBaseUrl('img/integrations/saas-cloud/microsoft-exchange-trace-logs-overview.png')} alt="Microsoft Exchange Trace Logs Overview" width="900"/>


### Message Monitoring

**Microsoft Exchange Trace Logs - Message Monitoring**. The Dashboard mainly focuses on the message traffic, including the number of unique senders and receivers and their domains. It shows the geographical locations of senders, receivers, and failed messages, and performs security threat analysis on the senders. Additionally, it displays the top 10 senders.<br/><img src={useBaseUrl('img/integrations/saas-cloud/microsoft-exchange-trace-logs-message-monitoring.png')} alt="Microsoft Exchange Trace Logs Message Monitoring" width="900"/>
The **Microsoft Exchange Trace Logs - Message Monitoring** dashboard mainly focuses on the message traffic, including the number of unique senders and receivers and their domains. It shows the geographical locations of senders, receivers, and failed messages, and performs security threat analysis on the senders. Additionally, it displays the top 10 senders.<br/><img src={useBaseUrl('img/integrations/saas-cloud/microsoft-exchange-trace-logs-message-monitoring.png')} alt="Microsoft Exchange Trace Logs Message Monitoring" width="900"/>
Loading