Idea ID 2830487
While integrating O365 Teams, we observed parsing issues for the below fields,
Here are the details:
Device Product: Microsoft Teams
> For Name: TeamSettingChanged = raw log fields: 'OldValue' & 'NewValue' not getting Parsed.
> For Name: MemberAdded/Removed = For raw log fields : 'TeamGuid' & 'Members' , Default parser is populating tokens also along with actual value in ArcSight fields i.e 'File Hash' & 'File Permission'
Can you please fix and include this in the next connector version release.
Service Request ID: SD02765814
Raw logs attached for reference.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.