After successfully implementing over Microsoft Log data into SolarWinds SEM we have started to run in to so precarious issues. Around every hour or so we start to get failed to read Microsoft log errors every 30 seconds. Then after either restarting the connector or waiting for around 15 minuets it fixes itself (most of the time). In our Microsoft 365 filer it loads back into readable data once it fixes itself but, it still is unreadable in SEM Internal Events. Currently reading Microsoft 365 logs is hit or miss whether it is working or not. Is there anyway to fix this? is this a Microsoft or SolarWinds issue?
Here is some of the data from the error we receive:
Event Type: InternalWarning
Description:
Failed to read Office365 audit logs: O365ManagementActivityApiFailed: O365 management API call failed (statusCode: 401): Unauthorized - Authorization has been denied for this request.
Component: FastCenter:Microsoft365 Audit Log
ProviderSID:
FastCenter normal error
