Microsoft Exchange
Microsoft Exchange consists of security analytics components that normalize Microsoft Exchange events, enabling you to analyze Microsoft Exchange data. Logpoint aggregates and normalizes logs related to log types, log volume, mail receivers, mail senders, mail activity, SMTP AQ failures, and SMTP bad emails from Microsoft Exchange systems so you can analyze the information through a dashboard and security report.
Key Information
MSExchangeOnlineMT is a new log source template, introduced in this release, that collects Exchange Online Message Trace logs through the Microsoft Graph Message Trace API. It was added since Microsoft retired the legacy Reporting Web Service that ExchangeOnlineMT template depends on. ExchangeOnlineMT remains supported; however, we recommend moving to MSExchangeOnlineMT by granting the ExchangeMessageTrace.Read.All Microsoft Graph permission. Existing dashboards, alerts, and reports keep working.
Enhancement
PLUG-17849
Added a new
MSExchangeOnlineMT log source to collect Exchange Online Message Trace logs, after Microsoft retired the Reporting Web Service the previous log source relied on. Your existing dashboards, alerts, and reports built on Exchange Message Trace data continue to work as is. No rebuild is needed after moving to the new log source.
Past Releases
Microsoft Exchange v5.4.0 ▾
Enhancement
KB-23762
Added Universal Rest API Fetcher based ExchangeOnlineMT log source template to simplify the log source configuration process. Go to Creating Log Source via a Template to learn more.
Key Information
- When selecting the initial fetch date of logs, select no more than 2-3 days ago. Choosing an earlier date may prevent logs from being fetched successfully.
- For ExchangeOnlineMT, you no longer need to use the PowerShell script zipped with Office365.
Microsoft Exchange v5.3.0 ▾
Enhancement
KB-22748
Added Syslog Collector based Microsoft Exchange Server log source template to simplify the log source configuration process. Go to Creating Log Source via a Template to learn more.
Microsoft Exchange v5.2.2 ▾
Bug Fixes
KB-20529, KB-20248
Some Symantec Mail Security and MS Exchange logs were not normalized by MSExchangeCompiledNormalizer.
KB-21363, KB-18174
Some Microsoft Exchange and Exchange MT logs were not normalized by ExchangeHTTPProxyCompiledNormalizer and LP_Exchange MT 2016.
KB-18960, KB-19426
The DefaultFolderType and LED fields were not properly normalized by ExchangeMTCompiledNormalizer.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.