UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21. Read more.
UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21.Read more.

Parsing Issues in Microsoft O365 Teams

Idea ID 2830487

Parsing Issues in Microsoft O365 Teams

Hello Team,

While integrating O365 Teams, we observed parsing issues for the below fields,

Here are the details:

Device Product: Microsoft Teams

> For Name: TeamSettingChanged = raw log fields: 'OldValue' & 'NewValue' not getting Parsed.

> For Name: MemberAdded/Removed = For raw log fields : 'TeamGuid' & 'Members' , Default parser is populating tokens also along with actual value in ArcSight fields i.e 'File Hash' & 'File Permission'

Can you please fix and include this in the next connector version release.

Service Request ID: SD02765814 

Raw logs attached for reference.

Thanks

Tags (1)
2 Comments
Micro Focus Contributor
Micro Focus Contributor
Status changed to: Waiting for Votes
 
Micro Focus Contributor
Micro Focus Contributor
Status changed to: Waiting for Votes
 
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.