You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I get o365beat[17747]: 2021-05-20T01:17:13.009Z#011DEBUG#011[api]#011beater/o365beat.go:336#011got these available content locations: []
When attempting to connect to GCC High using these values:
login_url: 'https://login.microsoftonline.us'
resource_url: 'https://manage.office365.us'
That is what was in the instructions. Is there something else to do for GCC High? Do content locations have different names?
The text was updated successfully, but these errors were encountered:
Actually, let me amend this. I am getting audit.Exchange events. However this is a new GCC High environment and the only real activity is in Azure AD, but it is not seeing any Audit.AzureActiveDirectory events. Content Types are set at:
content_types:
- Audit.AzureActiveDirectory
- Audit.Exchange
- Audit.SharePoint
- Audit.General
Can someone verify GCC High still has a content type of Audit.AzureActiveDirectory?
I get o365beat[17747]: 2021-05-20T01:17:13.009Z#011DEBUG#011[api]#011beater/o365beat.go:336#011got these available content locations: []
When attempting to connect to GCC High using these values:
login_url: 'https://login.microsoftonline.us'
resource_url: 'https://manage.office365.us'
That is what was in the instructions. Is there something else to do for GCC High? Do content locations have different names?
The text was updated successfully, but these errors were encountered: