Exchange Online Trace Logs Connector
Currently there are no Office 365 Exchange trace logs connector
Current method is to access trace logs via REST URI (https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace?)
Upload the logs to sentinel via a logic app or another process and query via MessageTraceLogs_CL
It would be useful for a connector to be available that directly pushes the Exchange trace logs to Sentinel so don't have to submit requests one by one on the Office 365 Security & Compliance center and wait for results.
This is coming by year end as part of the MTP raw data connector
Ramu Venkitaramanan (Office) commented
Thanks, thats great news