Quick Look – #MSOMS Office 365 (Preview) Solution


Yesterday MSOMS team released in preview Office 365 solution:

image

The first time when you click on the tile you will be taken to Settings to Connect to Office 365 subscription with account that is Office 365 global administrator:

image

As you can see you can add multiple subscriptions which is great. Supported workloads are Azure AD, Exchange and SharePoint. I am not Office 365 expert but so far I think these are the only workloads now that support logs.

After you’ve add your account you do not have to do anything. OMS will automatically try to pull the logs. Actually logs are pulled on notification from Office 365 as far as I can understand the flow. So the interval is pretty low between the logs being generated and available in OMS.

When your logs are populated in OMS you will see the following dashboards for the solution:

image

As you can see you have all operations (all Office 365 logs) and separate blades for the different logs.

All logs are in one Type:

Type=OfficeActivity

image

Under that type we can use filtering if we want to see logs for specific workload:

Type=OfficeActivity (OfficeWorkload=sharepoint)

image

We can get more useful results like this to see how our SharePoint is used:

Type=OfficeActivity (OfficeWorkload=sharepoint) | measure count() by Operation

image

You can even go more granular by having the same query but filtered to specific sites or even by user.

Useful scenario is to send some of this data to PowerBi (without exposing personal information) in order to create some beautiful dashboards that can track the usage of your Office 365 workloads for example.

I would put this solution more in the security and audit focus area of OMS. Very useful for auditing, tracking trends, noticing security issues or troubleshooting.

Hope this was nice quick look for you.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s