Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

When it comes to monitoring Microsoft Office 365, what information is important to you? We want to know!

Transitioning from an on premise based solution like Microsoft Exchange to a SaaS based solution like Office 365 can introduce a lot of challenges. One of those challenges is how to monitor it effectively, so that you can get ahead of, or at least be aware of issues before they significantly impact end users. So, what information is crucial for you to be able to troubleshoot issues, when faced with monitoring Microsoft Office 365? Tell us more!

Find more posts tagged with

Accepted answers

All comments

tinmann0715

Right now I am struggling with auditing compliance. Who has changed what and when? I would suuuuuuure love to get O365 audit logs into LEM for SIEM integration.

jeremymayfield

Basically, we need to know A.) service is up, that is pretty obvious as you either have connectivity or you don't. Beyond that, we would like to know that we have Legal hold and archiving enabled for every user, this is not a default and needs to be enabled as users are added. We use the AD sync utility so we need to know how often that runs and if it fails. Also it would be nice to know when their services go down and they are in a recovery. Although services rarely are in a network down status, they can sometime be in a restore which eludes to me that some data might be lost if you made changes just before the outage was reported. Although that scenario has never happened we are sure that it might. it would be nice to report on email addresses and or groups that have not been used in 90 days or more and how many mail boxes exist that are either shared or have no licenses assigned to them.

That is what is important to us here. Also what tinmann0715 said...

agusst

Some of these might be duplicates but off the top of my head...

Service Health monitors

Directory Sync Status

Licencing info - lics available, in use, warnings about getting low

A monitor for mailboxes that are going to be deleted once their Lic is taken away and they aren't turned into a shared mailbox.

Auditing for when O365 roles change or global admins are added...if this could be pushed to LEM as well that would be nice

I'm starting to setup DLP monitors for our Sharepoint online instance...it would be nice if that info could be sent to LEM in the same manner as the other local FIM monitors I have running for PCI.

jeremymayfield

Good call on the license monitor, i forgot that.

byrona

I am going to need to agree with tinmann0715 that we need a way to get the logs necessary for compliance.

tinmann0715

Here's something new we recently discovered. Global Admins can perform Content Searches in O365 email and then delete their search history. So, in other words, an admin can search for payroll information in email and then delete his/her tracks once he/she is done. Yikes!

sentheticangel

Need to be alerted if a mailbox is logged into from NOT an approved IP address.

jfaldmo

DNS associated with o365 is working.