Splunk® Supported Add-ons

Splunk Add-on for Microsoft Office 365

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Configure a Tenant in the Splunk Add-on for Microsoft Office 365

You must configure at least one Tenant in the Splunk Add-on for Microsoft Office 365.

Prerequisite: Before you create a Tenant, complete the previous step in the configuration process:

Set up the add-on using Splunk Web

  1. Go to the Splunk Web home screen.
  2. Click on Splunk Add-on for Microsoft Office 365 in the left navigation banner.
  3. Click on the Tenant tab.
  4. Click on Add Tenant and fill in the fields. Use the parameters you noted when you configured the application in the Azure Active Directory, see Configure an integration application in Azure AD for the Splunk Add-on for Microsoft Office 365 where:
    • Tenant ID is the Directory ID from Azure Active Directory.
    • Client ID is the Application ID from the registered application within the Azure Active Directory.
    • Client Secret is the registered application key for the corresponding application.
    • Cloud Application Security Token is the registered application key for the corresponding tenant.
    • Tenant Subdomain is the first component of the Cloud App Security Portal URL. For example, https://<tenant_subdomain>.<tenant_datacenter>.portal.cloudappsecurity.com.
    • Tenant Data Center is the second component of the Cloud App Security Portal URL. For example, https://<tenant_subdomain>.<tenant_datacenter>.portal.cloudappsecurity.com.
  5. Click Add to add the Tenant to your local configuration.
Last modified on 14 October, 2021
PREVIOUS
Configure an integration application in Azure AD for the Splunk Add-on for Microsoft Office 365
  NEXT
Configure Inputs for the Splunk Add-on for Microsoft Office 365

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters