06-20-2024 04:30 PM
Hi all, have been digging into our Cortex tenant and noticed that the email_data dataset has no data. Our emails come from Microsoft Exchange online. To get data to this dataset is it just having a compliance mailbox set up in exchange? We already have a connector to M365 and I can see data in the dataset msft_o365_exchange_online_raw but we haven't set up a compliance mailbox yet so I am assuming this may be the reason email_data is empty. Can anyone confirm?
Thanks in advance for any help.
06-21-2024 05:25 AM
Hi, thanks for reaching us using the Live Community.
The O365 emails goes to the "msft_o365_emails_raw" dataset, please check that one if you have something there. The "email_data" dataset is an internal default dataset.
You can take a look at this doc for more details about the Office 365 integration, including the steps required on the Microsoft side.
If this post answers your question, please mark it as the solution.
06-21-2024 05:25 AM
Hi, thanks for reaching us using the Live Community.
The O365 emails goes to the "msft_o365_emails_raw" dataset, please check that one if you have something there. The "email_data" dataset is an internal default dataset.
You can take a look at this doc for more details about the Office 365 integration, including the steps required on the Microsoft side.
If this post answers your question, please mark it as the solution.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
