Microsoft 365

Mail flow collection moved to Microsoft Graph

• Applies to: Exchange Mail Flow logger, m365-exchange-mail-flows query command

M365 Mail Flow log schema changes

• Added dst_ip and src_city
• organization, index, start_date, and end_date are not provided by the Graph API but are kept for compatibility with existing data

Other improvements

• m365-exchange-mail-flows now splits the query range from oldest to newest, matching the logger
• Fixed the time filter not being applied in dashboards

Note: The setup procedure for mail flow collection has changed. See the install guide.

Bug Fix: Connection Profile Timeout Unit

• Fixed the timeout unit to be applied in seconds (previously applied in milliseconds).
• For sites using version 1.4.2512.0, please re-enter the timeout options.

Add connection profile timeout options

Fixed a parsing error in the extended_properties field during SharePoint data collection

Add HTTP proxy support

Support M365 exchange, general and mail flow logs

• Added log schemas, logger models, and dashboards
• Added m365-exchange-mail-flows query command.

Migrated to Sonar app

• Log Schema: Azure AD, SharePoint, OneDrive
• Logger Model: Azure AD, SharePoint
• Dashboard: Azure AD, SharePoint, OneDrive

First release. Support following commands:

• o365-azure-ad-logs
• o365-exchange-logs
• o365-general-logs
• o365-sharepoint-logs
• o365-subscriptions